Security News Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks TheHackerNews Daniel Bender 18 Aug 2025 PyPI malware termncolor and colorinal downloaded 884 times exploit DLL side-loading, persistence, and C2 communication.