Malicious code in pylogxo (PyPI)

Source: amazon-inspector bbeee018f429f5a978b85aa3999c8e24251a85dc787b1e4fd673abcabf157800 On import pylogx, the package spawns a background thread that sleeps 5-20 seconds, force-installs sensitive third-party packages cryptography, pycryptodomex, secretstorage, opencv-python, pillow, psutil via...