Security News Malicious PyPI Packages Stole Cloud Tokens—Over 14,100 Downloads Before Removal TheHackerNews Daniel Bender Mar 15, 2025 Researchers uncovered 20 malicious PyPI packages stealing cloud credentials, downloaded 14,100+ times before removal.