Looks like lighting got compromised, maybe shai hulud?

### Bug description We've detected malware in 2.6.2 and 2.6.3 (Socket) The payload includes new bun runtimes and a 11mb payload. We're investigating further but please take action asap. Consider yourselves completely compromised. ### What version are you seeing the problem on? v2.6.2 v2.6.3 The big payload: https://socket.dev/pypi/package/lightning/files/2.6.3/py3-none-any-whl/lightning-2.6.3/lightning/_runtime/router_runtime.js