Python packages found in PyPI library, likely planted by criminals looking for victims of supply chain attacks. The packages hid various functionalities, such as a credit card stealer and code injection. Researchers from JFrog say the packages were downloaded about 30,000 times. They say lack of moderation and automated security controls in public software repositories allow even inexperienced attackers to use them as a platform to spread malware, whether through typosquatting, dependency confusion, or simple social engineering attacks.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/supply-chain-attack-detected-in-pypi-library/