Signs of malicious activity were first spotted in version 0.1.13 of the library, which included a change to the Python script ...

that uses malware hosted on the Python repository PyPI to search for files on the victim's device and exfiltrate them to a Telegram bot. The malicious packages, all of which now seem to have been ...

A malicious PyPI package “aiocpa,” that stole crypto wallet data via obfuscated code, has been removed after being reported ...