ReversingLabs blog
PyPI campaign mimicking open-source Python tools, attributed to Lazarus offshoot (in "SSCS attacks: A (partial) history") · 2024-01-16T06:00:00.000Z
ReversingLabs researchers discovered a malicious campaign on PyPI consisting of over two dozen packages that mimic popular open-source Python tools, and further digging uncovered that the campaign can be attributed to an offshoot of the Lazarus threat group.