Malicious code in textwrap-toolkit-stager (PyPI)

Source: amazon-inspector 9fc85924d5672f7c91c2dd5e97c46cc48e3ae48084f906b7b0ba9d606c433fa4 On import textwraptoolkitstager, the package's init.py unconditionally fetches Python source from http://194.5.152.9:8080/hacks/textwrap-toolkit/textwraptoolkit/init.py via urllib.request.urlopen and passes...