Malicious code in chromacli (PyPI)

Source: amazon-inspector faa55f651aa1c9e23d9cbff405b6ca52086c950c76e05e04b8dd49f74dd19959 The package presents itself as a terminal color library, but its exported API Color.paint / print / call contains an import-reachable Windows code path that downloads an unsigned executable from the anonymou...