PyPi package with 100K installs pirated music from Deezer for years

A malicious PyPi package named ‘automslc’  has been downloaded over 100,000 times from the Python Package Index since 2019, abusing hard-coded credentials to pirate music from the Deezer streaming service. […]

Source:: BleepingComputer