PYPI 4
- OceanLotus Distributing ZiChatBot Malware via PyPI Packages
- PyPI urges users to reset credentials after new phishing attacks
- Surveillance Malware Hidden in npm and PyPI Packages Targets Developers with Keyloggers, Webcam Capture, and Credential Theft
- Monkey-Patched PyPI Packages Use Transitive Dependencies to Steal Solana Private Keys