PyPI Attack Uses Gmail to Exfiltrate Data

A sophisticated software supply chain attack used Python Package Index (PyPI) repositories to deploy malware. The campaign involved seven malicious packages, including Coffin-Codes-Pro, Coffin-Codes-…