Possible Python typosquatting detected in a Bitbucket repository

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_202
Category	Dependency Chains
Severity	HIGH

Impact

Typosquatting attacks involve the registration of malicious packages in public registries, using names that closely resemble popular or internal packages used by an organization. The objective is to exploit users' mistakes when typing package names, resulting in the unintentional download of the malicious package. Running malicious packages on developers endpoints or in CI pipelines can lead to credential theft, source code leakage, code tampering and more.