According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
ytmusicapi is a Python 3 library to send requests to the YouTube Music API. It emulates YouTube Music web client requests using the user's cookie data for authentication.