This security incident is a malicious code attack that creates a Python Infostealer and backdoor in systems. It mainly targets software developers by compromising trusted open-source code packages and putting malicious code to be executed inside of tasks that automatically run. Once a developer downloads the package and opens the project folder in their IDE, mainly VS Code, it executes a payload without permission as the file is configured to do so, and installs a backdoor and uploads the Infostealer. This severely impacts businesses through widespread credential theft and corporate data breaches which allow hackers to laterally move inside of a system, and overall leads to loss of information. To address this, organizations must audit development environments for malicious packages, search local repositories for unexpected or suspicious files, change all keys, passwords, and tokens, and disable the automatic execution of tasks.