Malicious PyPI Packages Hijack Telegram Bot Servers, Researchers Warn
A supply-chain campaign active since November has been slipping trojanized Pyrogram forks onto PyPI, handing attackers the ability to read files on compromised Telegram bot servers.












