Finding malicious PyPI packages through static code analysis: Meet GuardDog | Heykuki News