Identify malicious PyPI packages using static analysis and metadata heuristics · HackerTrans