Malicious Package on PyPI Hides Behind Image Files, Spreads Via GitHub

The findings indicate that PyPI malicious packages and their obfuscation techniques are evolving