PYTHON OBFUSCATION TRAPS

Summary from the TLDR InfoSec newsletter

Developers have been targeted by malicious Python packages disguised as legitimate obfuscation tools, with the most recent package being "pyobfgood". The package has a destructive payload, "BlazeStealer", that retrieves an additional malicious script from an external source, enabling a Discord bot that gives attackers complete control over the victim's computer.