Malicious code in yyfinance (PyPI)

A large-scale malicious package campaign distributed over 900 compromised packages through the Python Package Index (PyPI). The yyfinance package was among those affected by this attack.\n\nThe malicious code installed a browser extension that performed clipboard manipulation and cryptocurrency wallet address replacement attacks. This technique targets users who copy and paste wallet addresses, replacing them with attacker-controlled addresses to redirect cryptocurrency transactions.\n\nThe attack was identified and documented by Checkmarx and credited to the OpenSSF's malicious-packages repository. The incident represents a significant supply chain compromise affecting the Python ecosystem.