https://blog.phylum.io/phylum-discovers-dozens-more-pypi-packages-attempting-to-deliver-w4sp-stealer-in-ongoing-supply-chain-attack This claims

cypress

python package is affected by supply chain attack - how can I know more about that?