Malicious code in aiohttp-ssl (PyPI)

Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp and aiohappyeyeballs packages. In the second wave, maliciou...