Malicious PyPI packages caught stealing developer data and injecting code

Expect to see more of these "Frankenstein" malware packages, researchers warn.