You couldn’t make it up. Except that’s exactly what they’ve done. Post navigation Counterfeit PyPI packages with 5,000 downloads installed cryptominers Lenovo launches Chromebook and ThinkPad updates – CNET
