• Harmful Python .whl files containing a new malware called "Kekw" were found on PyPI.
• The malware steals sensitive information and hijacks cryptocurrency transactions.
• The Python security team promptly removed the malicious packages from the repository.
• The impact is believed to be minimal as it's unclear how many people downloaded them.
• The incident highlights the supply chain attacks preferred by threat actors, emphasizing the responsibility of developers to vet libraries.
• Open-source software brings productivity but also exposes vulnerabilities.
• Earlier, malicious packages were found on npm and PyPI registries.