Malicious lightning PyPI versions 2.6.2 and 2.6.3 shipped a daemon-thread payload that runs on import, steals credentials, and worms into npm.
No pages have linked to this URL yet.
Log in or sign up to submit feeds.