Three newly discovered malicious Python packages posted to the Python Package Index (PyPI) are now believed to be part of the VMConnect campaign and have also been tied to the North Korean Lazarus Group. VMConnect is a popular tool IT teams use to connect a virtual machine to install or interact with the guest operating system in a virtual machine.

Source: SC Magazine