Then, the payload finds a second-level import and adds the code to the bottom of the file. Or, better still, it places the code between methods. That's all it takes to exploit the Python import ...