PyPI Poisoned: AI Chatbot Packages Deliver JarkaStealer
Experts from Kaspersky Lab uncovered a supply chain attack on software that persisted for nearly a year. Malicious packages, disguised as tools for creating neural network-based chatbots, were distributed via the PyPI repository. Upon...