Malicious code in py-craftreplacegui (PyPI)

Source: checkmarx 666ec473ada02be14b2a263b162d2ccf6089ef458bff0a5324cadffee115ed35 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...