Researchers at the Fortiguard Labs team have discovered a zero-day attack embedded in three PyPI packages