Malicious code in libpullgui (PyPI)

Source: checkmarx adf31be07903f821f1257995584c75609bbce6b50f93c1a6291b1b32a35672d2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...