https://securityonline.info/malicious-pypi-packages-expose-user-credentials/