The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.
"https://github.com/pypa/advisory-database/blob/main/vulns/exotel/PYSEC-2022-43134.yaml"