Cybersecurity researchers have discovered a malicious Python package.