https://10alert.com/posts/malicious-pypi-and-npm-packages-discovered/