Malicious code in py-getcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 342c8f20b250c233374ef4e1388ce977b4ca3e9f2b42eb29102dd4b57e18cbb2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...