Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
… 254/latest/meta-data/iam/security-credentials/ AWS IMDS credential theft network hxxps :// login . microsoftonline . com/ Azure AD token acquisition network hxxps :// fulcio . sigstore . dev Sigstore certificate request actor elitexp PyPI Package owner actor Bun/1.3.14 Upload user-agent What to do … …