Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
Open source malware surged 73% in 2025, with npm as a key target with rising risks in software supply chains and developer environments.