Improve detection of code execution via compile() and vars() indirection (Python)

[dwBruijn]

Hello,

Added patterns to code-execution rule to detect malicious packages using compile() and vars(__builtins__) indirection to access exec(), eval(), and compile().

These patterns were not being detected:

vars(__builtins__)['exec']("malicious code")
vars(__builtins__).get('eval')("malicious code")
vars(globals()['__builtins__'])['exec'](...)
vars(locals()['__builtins__'])['eval'](...)
compile(__import__('base64').b64decode('...'), '<string>', 'exec')