Threat actors with ties to North Korea have been observed using poisoned Python packages as a way to deliver a new malware
New PondRAT Malware Hidden in Python Packages Targets Software Developers
https://thehackernews.com/2024/09/new-pondrat-malware-hidden-in-python.html