Find malicious Python packages with one command

Related https://portswigger.net/daily-swig/pip-audit-google-backed-t...

It doesn’t find malicious packages but vulnerable packages. There is a major difference between these 2.