https://www.fortinet.com/blog/threat-research/continued-oss-supply-chain-attacks-hidden-in-pypi