Comment by jsrozner

Was thinking about how to address this generally, since exploits are likely to proliferate. (Wasn't there a recent exploit against many pip packages? Maybe this one - https://news.ycombinator.com/item?id=44283454