Malicious code in py-pullreplaceinfo (PyPI)

Source: checkmarx 08b9f63837485e5229ea63ca0fbc0b19bddbb128c38c915cf2152e2833318ca4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...