PYPI PACKAGE WITH 100K INSTALLS PIRATED MUSIC FROM DEEZER FOR YEARS

Summary from the TLDR InfoSec newsletter

Socket has discovered a malicious Python package called automslc that pirates music from the Deezer streaming service via hardcoded credentials. The automslc package utilized user supplies credentials to login to Deezer or hardcoded credentials and stores downloaded files locally. Socket reported that the package has been downloaded over 100K times.