A new malicious package has been found on the Python Package Index (PyPI) repository that could hide code in images with a steganographic technique and infect users through open-source projects on Github. The discovery has been made by Check Point Research (CPR), who shared it with Infosecurity earlier today.

Read full article on Infosecurity