Malicious code in libcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9216d5d3463e6d3a8ee423156f918c5fb258bbe4fcdbd45e2e8873ad3460bfa2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...