1/ Apiiro’s AI Engine discovered yesterday a software supply chain attack, a malicious package in
@pypi package manager, which was uploaded on Dec 2nd & targeting Windows users. Once installed, the package pywz, is decoding a base64 string & executing the decoded Python code