https://www.fortinet.com/blog/threat-research/info-stealing-packages-hidden-in-pypi