CERT24MAL-2026-17200 — Malicious code in aseity (PyPI)
The aseity package contains malicious code. Installation, and also a normal import, executes hidden code that downloads a second stage and deploys an infostealer that collects sensitive data and exfiltrates it to a C2 server.