Redirecting you to Reddit in 5 seconds:

https://old.reddit.com/r/cybersecurity/comments/1gng4ve/malicious_pypi_package_with_37000_downloads