Malicious code in py-candyproofstring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 508d27f9b14a6c0d7e466a6d4cb6885dc355d89d438a34ad06812508ce6e358b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...