Malicious PyPI packages abuse Gmail, websockets to hijack systems

Published on May 1, 2025

Seven malicious PyPi packages were found using Gmail's SMTP servers and WebSockets for data exfiltration and remote command execution. [...]