Malicious Python Package Poses as Discord Developers to Execute Remote Commands

A malicious PyPI package, 'discordpydebug', masqueraded as a Discord debugging utility and operated as a remote access trojan (RAT). After installation it polled a C2 at backstabprotection.jamesx123.repl.co, allowed remote file read/write and command execution, and potentially exposed sensitive local data (configuration files, tokens, credentials); the package reached over 11,000 downloads before detection, with listed IOCs including the C2 domain and endpoints.