Security News Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks TheHackerNews Daniel Bender Aug 18, 2025 PyPI malware termncolor and colorinal downloaded 884 times exploit DLL side-loading, persistence, and C2 communication.