Python Package Index

A threat actor compromised the open-source package element-data, which has over 1 million monthly downloads, by exploiting a vulnerability in a GitHub action to steal signing keys and account tokens. …