New ChocoPoC malware targets researchers via trojanized PoC exploits

ChocoPoC: multiple GitHub PoC exploits were found that add trojanized PyPI dependencies (frint → skytext) which load a Python RAT (ChocoPoC). The RAT supports command execution, arbitrary Python execution, file upload, and harvesting of browser passwords/cookies and other sensitive artifacts; attackers used compromised accounts to publish packages and the malicious dependency was downloaded ~2,400 times, indicating active abuse targeting security researchers.