[rwth-security] Malicious PyPI packages abuse Gmail, websockets to hijack systems