Malicious code in libcandystrmc (PyPI)

Source: checkmarx 4f19c935567a46b5de169074c22bff13f8d8b3ed8936fefdfd66b6e684be2a3f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...