The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained …

The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran malware at install time