MALICIOUS PYPI PACKAGES SLIP WHITESNAKE INFOSTEALER MALWARE ONTO WINDOWS MACHINES

Summary from the TLDR InfoSec newsletter

A threat actor known as WS has uploaded 9 malicious Python packages to the PyPI index. The packages contain base64 encoded PE files that drop and execute the WhiteSnake malware onto an infected device. The WhiteSnake malware is an InfoStealer that contains Anti-VM mechanisms. It utilizes Tor to communicate with a C2 server.