The Python code turned out to be a modified version of the open-source token logger Volt Stealer, while the novel JavaScript malware–dubbed “LofyStealer”–was created to infect Discord ...

PyPI Admin Ee Durbin was notified on June 28 this year, after which the token was revoked. The Python package Index (PyPI), is the world’s number one source for Python packages.

The malware used in these attacks is a variant of the open-source and Python-based Volt Stealer token logger and JavaScript malware dubbed Lofy Stealer, according to Kaspersky security researchers ...