Malicious code in selfvirtualcandy (PyPI)

Source: checkmarx d9c4fad376144ea5628018e02985dd05f201f34d7414a0690442bf9a5a932190 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...