Supply Chain Attack by New Malicious Python Package, “web3-essential”
It was discovered on January 30, 2023, by monitoring an open-source ecosystem. The package was published on January 26, 2023, the same day as its author, ‘Trexon’, joined the repository.