Python has made using Microsoft Excel much easier than it has ever been, and it isn't very hard to start using it yourself.
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.