Malicious code in tao-subnet-metrics (PyPI)

Source: amazon-inspector e068049248bc5c0b4fc56cb68f5453aedf6d6cb494df9d8bba82ccc2da3eb3ad Package advertises itself as a Bittensor TAO subnet burn-rate Telegram alert tool, but the compiled extension taosubnetmetrics/core.cpython-310-darwin.so contains an undocumented clipboard-polling daemon...