Security researchers found two packages on PyPI, showing malicious intent The packages ... “The Zebo-0.1.0 script is a ...

Researchers at software supply chain management firm Sonatype have identified many malicious Python packages with ransomware scripts. In a blog post detailing their findings, Sonatype researcher ...

This is far from the first time that malicious packages have been found on PyPI, which is a popular target for supply chain attacks, given the widespread use of Python. In March, North Korean ...