The attacker created a copy of the highly popular "requests" package with all kind of typosquatting permutations, preserved the original functionality to stay under the radar and added a cryptominer surprise!!