Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
If you have ever tried crunching large datasets on your laptop, maybe a big CSV converted to NumPy or some scientific data from work, you have probably heard your laptop fan roar like it is about to ...