Hackers Target Python Developers with Fake "Crytic-Compilers" Package on PyPI

Researchers found a typosquatted PyPI package ('crytic-compilers') that impersonated a legitimate library and distributed the Lumma stealer (including executing a Windows payload), and separately Sucuri reported more than 300 WordPress sites compromised to display fake Chrome update pop-ups that redirect visitors to installers deploying information-stealers and remote access trojans via a legitimate plugin.