Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks
Researchers have found a malicious package named termncolor in the PyPI repository that exploits a dependency called colorinal to execute malicious operations. This multi-stage malware operation enables persistence and code execution, raising concerns about supply chain security.