More than 170,000 users have been affected by an attack using fake Python infrastructure with “successful exploitation of multiple victims.” According to CheckMarx, the attack targeted the Top.gg GitHub organization, as well as other developers.
Source: The Register