marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
"https://github.com/pypa/advisory-database/blob/main/vulns/marcador/PYSEC-2022-185.yaml"