Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts