PyPI Admin Ee Durbin was notified on June 28 this year, after which the token was revoked. The Python package Index (PyPI), is the world’s number one source for Python packages.

A malicious package named 'pycord-self' on the Python package index (PyPI) targets Discord developers to steal authentication tokens and plant a backdoor for remote control over the system.