I think you're talking about something very different, which is attacking Python's supply chain. This is talking about malware payloads themselves. I don't agr

I think you're talking about something very different, which is attacking Python's supply chain. This is talking about malware payloads themselves. I don't agree that those capabilities (taking screenshots, especially eval) are trivial in other languages. Eval in particular makes things trivial since you can basically do: eval(get_payload()), which is awesome from a staging perspective - the trend in malware is to modularize more and more for a number of reasons (less code to scan for sigantures, new monetization strategies, easier to update, etc). So having the ability to do runtime, reflective module loading to trivially get a capability like screenshotting is pretty huge.