Malicious code in yfinace (PyPI)

Source: checkmarx 8fb9b040b8ad12632ab1cd1f6eaa89e250d0db7c044e2ab537e22b6b65c3a65c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet addresses --- Credit: OpenSSF source...