Malicious code in py-replacestringcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5db744830ad3efd65bcd8e7a3e8021d7df3ede62c5dc63fc7003a317aeccce5a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...