Malicious Python package collects AWS credentials via 37,000 downloads

Socket researchers say malicious package "Fabrice" has been live on PyPI since 2021.

Article Link: Malicious Python package collects AWS credentials via 37,000 downloads | SC Media