Researchers have identified critical vulnerabilities in various software ecosystems, including PyPI (Python), npm (JavaScript), Ruby Gems, NuGet (.Net), Dart Pub, and Rust Crates, which can be exploited to launch software supply chain attacks. These entry-point vulnerabilities, highlighted by Checkmarx researchers, allow attackers to harvest sensitive data using counterfeit packages and system command hijacking. A new strain of malware in the Python Package Index (PyPI) has been found targeting crypto wallets such as MetaMask, TronLink, and Atomic by draining private keys and seed phrases. This malware has already been downloaded over 3,700 times since October.