https://checkmarx.com/blog/over-170k-users-affected-by-attack-using-fake-python-infrastructure/