The malware was in the pypi package, so anyone doing `pip install ultralytics` would've received the virus. The injected malware code came from the PR branch n

The malware was in the pypi package, so anyone doing `pip install ultralytics` would've received the virus. The injected malware code came from the PR branch name, called by a Github action that was misconfigured.