securityaffairs.com
10 malicious packages on PyPI used to steal developers' data
10 packages have been removed from the Python Package Index (PyPI) because they were found harvesting data.
Pierluigi Paganini