Malicious code in multi-convert (PyPI)

Source: kam193 63d1834ac673303487e7c46affaf2be63ac0b142aaab8e79027144aad9cbd9de In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency is-it-ai, intentionally pinned by specific versions of...