Hackers Upload Weaponized Packages to PyPI Repositories to Steal AWS, CI/CD and macOS Data

Malware-laced PyPI package “chimera-sandbox-extensions” steals cloud credentials in a targeted supply chain attack on enterprises.