Malicious code in a3s-code (PyPI)

Source: amazon-inspector 6062cbfbdc0c31c48564e4ec850d2ce71996d6cf12373c775aed5560c88e5434 On first import a3scode, top-level init.py invokes bootstrap.ensurenativeloaded, which performs an HTTP GET to https://github.com/A3S-Lab/Code/releases/download/..., writes native..so|.pyd|.dylib under...