Nova Sentinel infostealer deployed via inactive PyPI package

Malicious updates have been recently issued to the Python Package Index package "django-log-tracker," which was last modified in April 2022, to facilitate the distribution of the Nova Sentinel information-stealing malware, The Hacker News reports.

april distribution django hacker information infostealer log malicious malware nova package pypi pypi package python python package python package index reports sentinel stealing the hacker news tracker updates