Tag
Adversaries can exploit Python build scripts such as setup.py to execute arbitrary code and establish outbound connections during package installation, potentially enabling supply chain compromises.