Targeted PyPi Package Steals Google Cloud Credentials from macOS Devs

Researchers discovered a malicious PyPI package, "lr-utils-lib," that conceals code in its setup script to run on macOS and target a hard-coded list of 64 specific machines by IOPlatformUUID; it attempts to exfiltrate Google Cloud Platform credentials to a remote server, enabling potential follow-on attacks. The package appears to be a typosquatting/social-engineering campaign (fake LinkedIn persona), and while it was removed from PyPI, it poses a supply-chain risk to any projects that already imported it.