If running with -m, or -c and an import of package matching name of malicious package. Doesn't happen when running your own script (located in another directory

If running with -m, or -c and an import of package matching name of malicious package. Doesn't happen when running your own script (located in another directory) that imports that package, even if you are running it in that directory.