Malicious code in python-dependency-confusion-attacks (PyPI)

--- Credit: OpenSSF source...