Two malicious #Python libraries caught stealing SSH and GPG keys 
Two malicious Python libraries caught stealing SSH and GPG keys | ZDNet
One library was available for only two days, but the second was live for nearly a year.www.zdnet.com
yasuki_baba likes this.