Security researchers found three malicious PyPI packages The packages had around 7,000 downloads They were designed to check ...

Attackers uploaded fake Python packages to PyPI that posed as Bitcoinlib ... After installation, the malware replaced CLI commands with malicious code and added hidden access points into wallet ...

The fake packages used typosquatting ... a popular ASCII Art Library for Python, Ascii2text uses the same description minus the release details. Its code fetches a malicious script that searches ...