https://socket.dev/blog/malicious-pypi-package-targets-discord-developers-with-RAT