A new campaign exploiting machine learning (ML) models via the Python Package Index (PyPI) has been observed by cybersecurity researchers. ReversingLabs said threat actors are using the Pickle file ...

After unpacking them, the malicious Pickle files had malicious Python code injected into them ... interpreting opcodes as they are read — but without first conducting a comprehensive scan ...