MSC-2026-5233

Three malicious PyPI packages uuid32-utils, colorinal, termncolor attributed to the OceanLotus APT group were discovered delivering ZiChatBot malware as part of a supply chain attack. Upon installation, the packages drop and execute a backdoor terminate.dll on Windows / terminate.so on Linux that...