The method introduces another supply chain vulnerability for the future, as most security tools solely scan Python source code (PY) files, making them susceptible to missing such attacks. Zanki said ...

Their creator(s) copied the code of popular packages and created ... "At the moment, I am focused on improving the Python (PyPI) scanner, and I will be doing more regular scans," Bertus told ...