FYI: Threat actor targeting many PyPI packages with automated typosquatting campaign

This is the same actor as highlighted by [Phylum yesterday](https://blog.phylum.io/phylum-discovers-revived-crypto-wallet-address-replacement-attack) - currently they're pushing a cryptostealer everywhere they can, but who knows what's next. As of Friday they'd tried about 200 typosquats. I haven't counted today's batch but I'd estimate it's another 200-300.

Someone's clearly reached the automation section of "Black Hat Python" :P

Within the past 24 hours I've seen them typosquatting the following packages (parenthesis show an example typosquat):

* xlsxwriter (ex. xlsxwwriter)
* urllib3 (rllib3)
* simplejson …

actor automated automation black hat campaign click client cybersecurity discord packages pypi python reporting requests targeting threat threat actor toolkit typosquatting webhook websocket