Malicious code in loadcandy (PyPI)

Source: checkmarx 7534a46a87cc97d59ea05334c680b5b4db823bad3013dc4d2a16fd1a592a8f1e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...