Malicious code in libcvpiphttp (PyPI)

Source: checkmarx 753d0e2e99de44b6004baf249e598af0745fb18220dde3bb61fde34045be471c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...