Researchers Warn of Malicious Packages on PyPI Using Steganography Techniques

The malicious package infects PyPI users through open-source projects on Github. The package was uploaded to PyPI on October 31, 2022, it had a vague header stating this is a ‘core lib for REST API’.