Fake Third-Party Python Libraries Are Stealing Information