Malicious code in libpullcandy (PyPI)

Source: checkmarx a83c6b786b41646b70729f4847804eff59a67234245f6865bf375ebd10ed425a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...