Malicious code in libasync (PyPI)

Source: kam193 a46929f4ba4ca97beaf5511f0be0af36c4d1e9deff65bea3821137c2c258eb9c During import, the code obfuscated in native extension downloads malicious remote executable and establishes persistence via registry keys. Downloaded binary seems to be used for cryptomining. Attacker infrastructure...