A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
Turns out the fix was in the Chrome Web Store ...