TeamPCP strikes again: Xinference (v2.6.0-2.6.2) PyPI package compromised(research.jfrog.com) |
TeamPCP strikes again: Xinference (v2.6.0-2.6.2) PyPI package compromised(research.jfrog.com) |
Also, worth mentioning that TeamPCP denies involvement, and instead points to a copycat using their name: https://xcancel.com/tradelots/status/2046928328066543832