pypi · Malicious package advisory
Malwarepy-candycandypull
MAL-2023-5000
Malicious code in py-candycandypull (PyPI)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: checkmarx (5aeee9e250f41f7dfceb4a9a534e1fdf010ec336822d38a992339b6e3f0d0149) EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware