The past year has seen over 10,000 downloads of malicious packages hosted on the official Python package repository