Lazarus hackers deploy fake VMware PyPI packages in VMConnect attacks

North Korean state-sponsored hackers have uploaded malicious packages to the PyPI (Python Package Index) repository, camouflaging one of them as a VMware vSphere connector module named vConnector. [...]

attacks connector deploy fake hackers lazarus malicious malicious packages north north korean package packages pypi pypi packages python python package python package index repository security sponsored state vmconnect vmware vmware vsphere vsphere