Attackers use typo-squatting, obfuscation, and fake accounts to slip Python-based malware into open-source projects, raising ...