Cybersecurity researchers have found a malicious bundle on the Python Package deal Index (PyPI) repository that purports to be an utility associated to the Solana blockchain, however comprises malicious performance to steal supply code and developer secrets and techniques.
The bundle, named solana-token, is not accessible for obtain from PyPI, however not earlier than it was downloaded 761 instances. It was first
Malicious PyPI Package deal Posing as Solana Software Stole Supply Code in 761 Downloads
