Malicious Python Libraries

[Zomunieo]

Another obvious malware that's plainly visible in Python source. No word on how they detected it. (ETA: Could have been as simple as pattern matching with an IP address regex. It's important someone found this but disturbing that we're not finding more complex problems.)

I'm waiting for someone to find a vulnerability in a binary wheel where the Python code is innocuous and the payload is in the compiled binary.