Socket: PyPI and npm payment SDK malware compromises CI/CD

1 · Developer Tech · July 8, 2026, 4:02 p.m.
APIs Build & Ship CI/CD & Release Engineering Cybersecurity & Development malware package security Developer Tools npm
Summary
Socket reports that 17 malicious payment SDK packages were found on npm and PyPI, designed to harvest developer credentials and CI/CD variables, posing a threat to engineering teams using PaySafe and Skrill.
Read full post on www.developer-tech.com →
AUTHOR