https://medium.com/checkmarx-security/first-known-phishing-attack-against-pypi-contributor-95db34548868