Identify malicious PyPI packages using static analysis and metadata heuristics
github.com