A researcher going by the handle mschwager on GitHub demonstrated an attack method that abuses the 'setup.py' file in Python modules to perform code execution when the package is installed.

PyApp seems to be taking the Python world by storm, providing long-awaited click-and-run Python distribution. For developers ...