and also the most recent horses release on pypi includes a crypto miner and credential stealer.