A malicious Python package has been hiding in the Python Package Index (PyPI) for years, stealthily stealing people’s Amazon ...