“FastAPI is a highly popular Python web framework.”
fastapi-toolkit was legitimate for eight months. Then a commit labeled as a bugfix added a hidden route that runs any Python or SQL sent with the right token. The poisoned release hit PyPI two minutes after the commit. Nobody reviews a bugfix in a small helper package. That’s exactly why it works.