When PyPI Becomes the Attack Vector: 39,000+ Downloads of Malicious Python Packages - Arvid Berndtsson