Sep 27 2023 SSH keys stolen by stream of malicious PyPI and npm packages

Source

A stream of malicious npm and PyPi packages have been found stealing a wide range of sensitive data from software developers on the platforms. [...]