Top open source PyPI package with over 1 million downloads each month hacked to send out ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.
How-To Geek on MSN

Tired of hunting through logs? Here's how I automated the entire process

Now a tiny script turns them into clean, shareable error reports in seconds.
Techzine Europe

Malicious Python package poses new supply chain threat

The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...