Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.
Russian hackers use fake CAPTCHA tests to spread dangerous malware targeting governments and journalists. Learn how to protect yourself from these deceptive attacks.