With over 2.2 billion installs, the flawed Python package offers attackers a huge blast radius, including silent access to ...