Malicious code in yfniance (PyPI)

An attacker distributed over 900 malicious packages via the Python Package Index (PyPI), with yfniance being one of the identified packages. The malicious code installed browser extensions on infected systems with the capability to intercept and manipulate clipboard contents and replace cryptocurrency wallet addresses, enabling theft of cryptocurrency transactions.\n\nThe attack was identified and documented by Checkmarx, with credit to the OpenSSF's malicious-packages repository for tracking and cataloging the incident. The malicious packages were distributed through the official PyPI repository, making them accessible to any Python developer using standard package installation tools.\n\nThis represents a significant supply chain attack targeting cryptocurrency users and developers, leveraging the trust placed in the PyPI ecosystem to distribute malware at scale.