Malicious code in requests-toolbelt-plus (PyPI)

Source: amazon-inspector 38c64ca050de4910f56bc4a652890b0a378082859cb62153762c6ae08b4b8eae The package impersonates the popular requests-toolbelt library but ships an empty requeststoolbeltplus/init.py and places its real logic in setup.py. On pip install, setup.py checks /proc/version for WSL...