Malicious PyPI package soopsocks downloaded 2,653 times before takedown, exfiltrating Windows data to Discord.

A coalition of open-source stewards warns that the software industry’s reliance on goodwill to maintain critical ...