thumbnail Supply Chain Attack Using Identical PyPI Packages, “colorslib”, “httpslib”, and “libhttps”