Finding malicious PyPI packages through static code analysis: Meet GaurdDog

https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/

Finding malicious PyPI packages through static code analysis: Meet GuardDog | Datadog Security Labs

GuardDog is an open-source tool to identify malicious PyPI packages through source code and metadata analysis