STACKEXCHANGE ABUSED TO SPREAD MALICIOUS PYPI PACKAGES AS ANSWERS

Summary from the TLDR InfoSec newsletter

Checkmarx researchers have discovered an infostealer campaign targeting users of the Raydium and Solana blockchains. The campaign published a set of PyPi packages purporting to be official packages and then posted high quality responses on StackExchange threads that promoted the malicious packages. The packages were downloaded over 2,000 times before being removed from PyPi.