Cybercriminals Deploy Malicious PyPI Packages to Hijack Developers’ Devices for Mining Cryptocurrency

All malicious packages were published by the same account and tricked developers into downloading them thousands of times by using misspelled names of legitimate Python projects.