The best open source PyPI package with over 1 million downloads every month, hacked to deliver malware
A widely used PyPI package was recently compromised by a malicious update The attack leveraged a GitHub Actions workflow to insert infostealer code into a release. Officials quickly released a clean version, alternated credentials and launched an external investigation. A popular Python Package Index (PyPI) package has been compromised and used to deliver malware to […]









