All Episodes

A malicious PyPI compromise silently stole SSH keys and cloud credentials—and was only caught because the malware had a bug.