Do you have a Python application ... bundle third-party packages. To that end, the Shiv library, created by developers at LinkedIn, adds features to turn .pyz files into self-extracting archives ...

The campaign has been monitored since early April by analysts at Checkmarx's Supply Chain Security team, who discovered 272 packages with code for stealing sensitive data from targeted systems.

Researchers found three malicious PyPI packages, two targeting bitcoin developers, and one WooCommerce stores Two are designed to steal data ... packages on the Python Package Index (PyPI ...

A report from cybersecurity analysts Checkmarx claims that over the past six months, “hundreds” of infostealers have been added, through 272 Python packages ... data from wallet apps, Discord ...