Info Stealing Packages Hidden in PyPI
An info-stealing PyPI malware author was identified discreetly uploading malicious packages.
PyPI Attackers Still At It: Malicious Packages Drop Trojans and Info-stealers
Sonatype's malicious open source and malware detection systems found hundreds of malicious PyPI packages.