Cloud Provider Credentials Targeted in New PyPI Malware Campaign
Over the weekend, Phylum’s automated risk detection alerted us to a series of publications surrounding packages on PyPI, all purporting to be some kind of cloud provider SDK or helper package. While these packages do,