A widely used Python package with more than 95 million monthly downloads has been compromised with credential-stealing ...