Python Crypto Library Updated to Steal Private Keys

The malicious activity was introduced in version 0.1.13 of the aiocpa library, released on November 20, 2024. The payload was hidden within an obfuscated code blob in the cryptopay/utils/sync.py file, designed to execute upon module import.