Malicious 'Pyronut' Package Backdoors Telegram Bots with Remote Code Execution | Endor Labs

The malicious Python package pyronut copies the entire project description and code of the popular pyrogram Telegram framework to pass itself off as the real thing, while silently installing a runtime backdoor that grants the attacker arbitrary Python and shell command execution on every victim’s machine.