Threat actors use malicious PyPI packages to infiltrate systems and execute various attacks like data exfiltration, ransomware deployment, or system compromise.  By masquerading as legitimate Python libraries all these packages can easily bypass security measures.  This allows it to infect the unsuspecting users’ environments and potentially cause widespread damage. Cybersecurity researchers at ReversingLabs recently discovered new malicious PyPI packages that could steal crypto wallet passwords.

Source: GBHackers