Zulip

OceanLotus suspected of using PyPI to deliver ZiChatBot malware

Securelist researchers identified a PyPI supply chain attack orchestrated by OceanLotus, utilizing seemingly legitimate Python packages (uuid32-utils, colorinal, and termncolor) to deliver the previously unknown malware…