---
title: "Discussion on \"Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers\" | Hashnode"
description: "Discussion on \"Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers\". A Python package on PyPI called elementary-data, with over 1 million downloads per month, has suffered a supply chain security attack sourced through a GitHub Actions attack vector.\nTL;DR\n\n\n\n\n\n\n\n\nAdvisorySNYK-PYTHON-ELEMENTARYDATA-16316110\n\nSeverityC..."
url: "https://hashnode.com/posts/malicious-release-of-elementary-data-pypi-package-steals-cloud-credentials-from-data-engineers/69f16665173c94a25d589dd1"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers](https://snyksec.hashnode.dev/malicious-release-of-elementary-data-pypi-package-steals-cloud-credentials-from-data-engineers?utm_source=hashnode&utm_medium=feed)

A Python package on PyPI called elementary-data, with over 1 million downloads per month, has suffered a supply chain security attack sourced through a GitHub Actions attack vector. TL;DR AdvisorySNYK-PYTHON-ELEMENTARYDATA-16316110 SeverityC...

Apr 29 · 10 min read · snyksec.hashnode.dev  
Read the article

## Written by

[Snyk](https://hashnode.com/@Snyk)

@Snyk

  
[View profile](https://hashnode.com/@Snyk)

Automatically find and fix vulnerabilities in your code, open source, and containers. Sign up for free at https://snyk.co/hashnode

## Responses

Markdown supported · ⌘↵ to post

No responses yet.