PyPI package with 1.1M monthly downloads hacked to push infostealer

PyPI package with 1.1M monthly downloads hacked to push infostealer

More to explore