VMConnect: Malicious PyPI packages imitate popular open source modules

Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks

When byte code bites: Who checks the contents of compiled Python files?