The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
"https://github.com/pypa/advisory-database/blob/main/vulns/pycrowdtangle/PYSEC-2022-242.yaml"