lightning PyPI Compromise: A Bun-Based Credential Stealer in Python