Comment by timdorr

I'm not a Python dev. Why would they do this? This is giving vibes of malware embedded into npm packages.