alya2416@tg says to YSITD https://bitbucket.org/0xsky/xmlrpc/ https://arstechnica.com/security/2024/12/yearlong-supply-chain-attack-targeting-security-pros-steals-390k-credentials/