Most of these packages were taken down by PyPI, ESET collaborated with PyPI to ensure the removal of any remaining malicious packages.
PyPI
This threat is a concealed malware introduced by an attacker under the pseudonym "kohlersbtuh15" via the PyPi package manager.
all project maintainers publishing software on the official PyPI third-party software repository must bind 2FA verification by the end of 2023