OtterCookie v3 has been found to incorporate a new upload module to send files matching a predefined set of extensions to the ...

Attackers had added malicious code to the rand-user-agent package, which is used for automatic tests and web scraping, among other things.