https://www.reversinglabs.com/blog/package-names-repurposed-to-push-malware-on-pypi