2025 07 Cas Base supply chain incidents

Malicious code in xxoo-bale (PyPI)

The PyPI package xxoo-bale contained malicious code designed to download and execute remotely stored malware with persistence mechanisms. The malicious payload required a separate trigger to activate.