Malicious code in py-candyreplace (PyPI)

Source: checkmarx ac521b80fd501a1c0394bdfc0a15912a182575a44e61b6b735ed9c366c792a35 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...