Researchers warn of a malicious campaign targeting #PyPI users with fake "time" utilities that steal sensitive data like #cloud access tokens. Two sets of packages, totaling 20, have been downloaded over 14,100 times, affecting major cloud services
https://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.html