Malicious code in selfpullsplitcv (PyPI)

Source: checkmarx cfefdf08350dca934782439c48da016421502a48273d3ac3eb7884d39bc6795a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...