Software downloaded 30,000 times f rom PyPI ransacked developers’ machines