R research.jfrog.com TeamPCP strikes again: Xinference (v2.6.0-2.6.2) PyPI package compromised 1 points lukecarr 6 months ago 1 comments