According to a report from Palo Alto Networks Unit 42, the malware is advertised on Telegram as the “ultimate stealer” and has been on sale since April 2025.
Five malicious packages were found on the Python Package Index (PyPI), stealing passwords, Discord authentication cookies, and cryptocurrency wallets from unsuspecting developers. PyPI is a software ...
Attackers continue to create fake Python packages and use rudimentary obfuscation techniques in an attempt to infect developers' systems with the W4SP Stealer, a Trojan designed to steal ...