BleepingComputer reports that information- and cryptocurrency-stealing malware were discovered across 272 Python packages with nearly 75,000 downloads that are part of a malicious campaign that has been increasingly sophisticated during the last six months. Malware leveraged in the campaign has not only targeted browser-stored data, cryptocurrency wallet information, and Discord, Minecraft, and Roblox details, but also enabled screenshot capturing and file exfiltration from impacted systems, as well as app data manipulation, according to Checkmarx Supply Chain Security report.

Source: SC Magazine