sbsa/cu130: links for malicious-pip-package-for-demo