Backdoor in ssh-decorator PyPI package

Reddit discussion: https://www.reddit.com/r/Python/comments/8hvzja/backdoor_in_...

https://news.ycombinator.com/item?id=17025863 has more comments.