These malicious packages have been downloaded thousands of times, mainly from the U.S., China, France, and other countries. The attacker used steganography to hide a malicious payload within an innocent-looking image file