Malicious code in skills-analyzer (PyPI)

Source: kam193 415c95c384a9901bda7b98bdcf86142c041e21de2759e7048769a49bf54d9bea In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency is-it-ai, intentionally pinned by specific versions of...