Each one came bundled with its own custom Python implementation of the secp256k1 elliptic ... Bitcoin Core already includes a fast, constant-time C library for secp256k1 cryptography. So why don’t BIP ...

Attackers exploited a script injection vulnerability via GitHub Actions to inject malicious code during the automated build process, poisoning the resulting packages of the popular Python library.