Security News Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads TheHackerNews Daniel Bender May 13, 2025 Malicious PyPI package ‘solana-token’ stole developer source code in 761 downloads via hidden exfiltration.