Malicious code in py-candyreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac521b80fd501a1c0394bdfc0a15912a182575a44e61b6b735ed9c366c792a35 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...