alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Python3 🐍 Package install "; flow:to_server, stateless; ja3.hash; content:"07ff1e545ef8ab3fcf8a4dc9272221c2"; fast_pattern; tls_sni; content:"pypi.org"; endswith; nocase; metadata:former_category JA3; reference:url,https://pypi.org/project/pip/; metadata:created_at 2024_06_16, updated_at 2024_06_16; sid:3321280; rev:1; classtype:policy-violation;)