thumbnail Malicious PyPI package opens backdoors on Windows, Linux, and Macs