Python developers have been warned to be on guard against malicious packages in the open source coding language's software repository, and to validate what they download to include in their programs.