Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Python scripts. Over the past few days ...

that uses malware hosted on the Python repository PyPI to search for files on the victim's device and exfiltrate them to a Telegram bot. The malicious packages, all of which now seem to have been ...