Electronic security Researchers from Checkmarx have discovered more than two dozen malicious packages on PyPI, a popular repository for Python developers, and have released their findings in a new package. Report (Opens in a new tab).
These malicious packages, designed to look almost identical to legitimate packages, attempt to trick reckless developers into downloading and installing the wrong package, thus distributing malware.