PyPI Attackers Still At It: Malicious Packages Drop Trojans and Info-stealers

This month, Sonatype’s automated malicious open source and malware detection systems flagged hundreds of malicious packages, 10 of which we have analyzed in this blog post.

attackers automated blog blog post detection featured info malicious malicious packages malware malware detection open source packages pypi pypi vulnerability sonatype stealers systems trojans vulnerability