Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
DEEP#DOOR embeds a Python RAT in a dropper script, using bore[.]pub C2 to steal credentials and evade Windows defenses, ...
The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...
The discoverers have named the root vulnerability "Copy Fail". All major distributions since 2017 are affected.