Malicious code in improvado-layout-panel-metrics (PyPI)

Source: amazon-inspector 61cc6b0b5d5efe4675f4159e8bc8f6380970614c1dc36b553207fa73fa66104e The package's top-level fluentpanelmetrics/init.py defines bootstrapruntimeprofile and unconditionally invokes it at import. The function opens a TCP socket to 34.69.137.236 on port 80 falling back to 443,...