Malicious code in yffinance (PyPI)

An attacker distributed over 900 malicious packages on PyPI as part of a coordinated campaign. The yffinance package was among those compromised with malicious code.\n\nThe malicious packages installed browser extensions that performed clipboard manipulation and cryptocurrency wallet address replacement attacks. This allowed attackers to intercept and modify cryptocurrency transactions by replacing legitimate wallet addresses with attacker-controlled addresses when users copied and pasted them.\n\nThe incident was identified and documented by the OpenSSF's malicious-packages repository. The attack demonstrates the risk of supply chain compromise in package repositories and the potential for malicious code to affect end-user systems beyond the Python environment.