Python Package Index — Web Pulse coverage

Open source package with 1 million monthly downloads stole user credentials :: https://wpnews.pro/news/open-source-package-with-1-million-monthly-downloads-stole-user-credentials