Trojanized mrmustard PyPI Package Install or Import

Duo Tech@duotech

•updated Jul 24, 2026•0•0•4

Detects installation or import of the trojanized mrmustard 0.7.4 PyPI package via pip or a direct python import, the initial-access vector for this supply-chain compromise.