Researchers found three malicious PyPI packages, two targeting bitcoin ... They claim to be a fix for a legitimate Python module named “bitcoinlib”, which contains features for creating ...

Attackers had added malicious code to the rand-user-agent package, which is used for automatic tests and web scraping, among other things.