Malicious PyPI ‘requests’ fork hides backdoor in PNG file

The “requests-darwin-lite” package was downloaded more than 400 times before its removal.

backdoor file fork malicious network security package png pypi requests supply chain threat intelligence