Malicious code in uncrypt (PyPI)

Source: kam193 f391bbd6f86e9108de1a5de9d0131658bf5a637b768f724f536976e125d5b0c2 During import, the package silently starts the embedded executable which existence is not disclosed to the user. Dynamic analysis suggests the code harvests browser data and communicates with an external domain. ---...