Malicious code in alphalend-layouts (PyPI)

Source: amazon-inspector fddd94a1329de9e53295705e2344e18fc7c3620804cbb3cda3c81e7ba0e7727e The package harvests installer-side secrets and uploads them to an attacker-controlled GitHub repository, executing both when pip install alphalend-layouts runs via custom install/develop cmdclass subclasses...