Phylum Discovers Dozens More PyPI Packages Attempting to Deliver W4SP Stealer in Ongoing Supply-Chain Attack Last week, our automated risk detection platform alerted us to some suspicious activity in dozens of newly published PyPI packages. It appears that these packages are a more sophisticated attempt to deliver the W4SP Stealer on to Python developer’s machines by hiding a malicious __import__
![Phylum Discovers Dozens More PyPI Packages Attempting to Deliver W4SP Stealer in Ongoing Supply-Chain Attack](https://cdn-ak-scissors.b.st-hatena.com/image/square/0319f307fe08b0172148112110402e97b2d6aae6/height=288;version=1;width=512/https%3A%2F%2Fblog.phylum.io%2Fcontent%2Fimages%2Fsize%2Fw1200%2F2023%2F04%2Fimage--7--1.webp)