Mini Shai-Hulud malware compromises open-source packages Let's Data Science