Your Pip Install Is a Backdoor — Fix This Now!

Every Python package you install can run code on your machine. Pin versions, use lockfiles, and stop letting AI agents add random…