Credit-card-stealing, backdoored packages found in Python's PyPI library hub
theregister.com