You've heard of yoga with kittens, and goats, and maybe even reindeer… but what about a bunch of pythons and one baby Columbian Common Boa named Mango?
Researchers at Endor Labs uncovered 88 new packages tied to new waves of the campaign, which uses remote dynamic dependencies to deliver credential-stealing malware.