Malicious code in controlvm (PyPI)

Source: checkmarx 90a216c24cc76322b712ac3100bcaa713cb16bf4fd308016643e1e6d247082cd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...