Malicious code in candyload (PyPI)

Source: checkmarx 9c04777704612fedc36d211079f7b841e003d4521d529c1e6669f1d20cfc62a3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...