27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT Experts

An unknown threat actor has been observed publishing typosquat packages to the Python Package Index (PyPI) repository for nearly six months with an aim to deliver malware capable of gaining persistence, stealing sensitive data, and accessing cryptocurrency wallets for financial gain.
The 27 packages, which masqueraded as popular legitimate Python libraries, attracted thousands of downloads,

actor aim cryptocurrency cryptocurrency wallets data deliver malware downloads experts financial found malicious malware package packages persistence popular publishing pypi pypi packages python python package python package index repository sensitive sensitive data stealing targeting threat threat actor wallets