Malicious npm and PyPI packages use prompt injection to bypass AI security scanners

A new wave of malicious packages on the npm and PyPI repositories is employing “indirect prompt injection” to disrupt AI-assisted malware analysis. Researchers identified that the Hades campaign and specific packages like shai_hulululud embed large blocks of deceptive text within non-executable code…

View Post on Scour ↗

More from 4sysops on Scour.