PyPI Packages Become a Lucrative Target For Malware Attacks

Cybersecurity researchers continue to discover new software supply chain attacks resulting from Python Package Index (PyPI). Some PyPI packages were injected with W4SP Stealer with the aim of infecting developers’ machines. All in all, these malicious packages were downloaded more than 5,700 times