J jfrog.com Malicious PyPI packages stealing credit cards and injecting code 489 points hpb42 5 years ago 226 comments