Malicious code in nebulallm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5428d0f2f07674817697574b1993211dfa902bad746d8cd6efc1ad6b1fbbfd90 nebulallm 1.4.3 presents itself as an AI API client stub but ships a custom install command class in setup.py that executes on pip install. The insta...