Security firm Checkmarx found that one in three software packages from PyPI contains a flaw that can lead to malicious code being automatically installed. Many software packages from the Python ...

The malicious package downloads an image from the Web, then uses a steganography module to extract and execute the code to download malware.