ReversingLabs spotted "VMConnect" in early August, a malicious supply chain campaign with two dozen rogue Python packages on PyPI. It's…