Open Source software is always trustworthy, right? [Bertus] broke a story about a malicious Python package called “Colourama”. When used, it secretly installs a VBscript that watches th… ...

The package names mimicked those of popular packages and libraries such as Requests, Pillow, and Colorama. The temporary suspension is only the latest event to highlight the increased threats ...