Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

April 15, 2025

Cybersecurity researchers have disclosed a malicious package uploaded to the Python Package Index (PyPI) repository that’s designed to reroute trading orders placed on the MEXC cryptocurrency exchange to a malicious server and steal tokens.
The package, ccxt-mexc-futures, purports to be an extension built on top of a popular Python library named ccxt (short for CryptoCurrency eXchange Trading),

Source: Read More

Previous ArticleCritical Apache Roller Vulnerability (CVSS 10.0) Enables Unauthorized Session Persistence

Next Article Google Play Console gets a makeover to provide app developers with easier access to insights into performance and quality

Report: 71% of tech leaders won’t hire devs without AI skills

Slack’s AI search now works across an organization’s entire knowledge base

In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

Too many open browser tabs? This is still my favorite solution – and has been for years

This new browser won’t monetize your every move – how to try it

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

The details of TC39’s last meeting

The details of TC39’s last meeting

Reclaim Space: Delete Docker Orphan Layers

Notes Android App Using SQLite

KeySmith – SSH key management

KeySmith – SSH key management

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

Scaling Up Reinforcement Learning for Traffic Smoothing: A 100-AV Highway Deployment

Repurposing Protein Folding Models for Generation with Latent Diffusion

CVE-2024-52035 – Catdoc OLE Document File Allocation Table Parser Integer Overflow Heap Corruption Vulnerability

Microsoft “.library-ms” File / NTLM Information Disclosure (Resurrected 2025)

CVE-2025-53478 – Mediawiki CheckUser Extension Cross-Site Scripting (XSS)

CVE-2025-48489 – FreeScout Cross-Site Scripting (XSS) Vulnerability

CVE-2025-6278 – Upsonic Path Traversal Vulnerability

BrosTrend AX1800 USB WiFi 6 Adapter AX4L Linux Compatible

Top Benefits of Outsourcing React Native App Development🌍

CVE-2025-20308 – Cisco Spaces Connector Privilege Escalation Vulnerability

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

Related Posts