UN Panel of Experts S/2024/215
Malicious Python packages (typosquatting) on an open-source Python repository
Para 139: “With regard to code repositories, a cybersecurity company exposed a Lazarus Group supply chain campaign effected by posting dozens of malicious Python packages to an open-source Python software repository, which served as a distribution point for the malware. The packages reportedly mimicked popular open-source Python tools through typosquatting and/or purporting to offer new tools ...” (footnote 99: ReversingLabs, VMConnect)