The Trojan, Python.Pytroj, infected .pyc Python files with arbitrary code and was discovered in a proof of concept form by Symantec researchers. It was not considered a "serious risk", researcher ...

What Durbin didn’t realize was that the token was also included in .pyc (Python compiled bytecode) files generated as part of the build process, and that those files, stored in the __pycache__ ...