MALICIOUS PYPI PACKAGE STEALS DISCORD AUTH TOKENS FROM DEVS

Summary from the TLDR InfoSec newsletter

A malicious PyPi package is attempting to squat the official Discord Python library. The malicious package steals Discord auth tokens and relays them to an external server as well as setting up a backdoor on port 6969. The package is reportedly still available and was published by a verified publisher account.