WASP Malware Uses Steganography and Polymorphism to Evade Detection

PyPI, an open-source repository used by developers to share Python packages used in projects, is an increasingly popular target in software supply chain attacks for uploading malicious code via fake packages.