https://www.reversinglabs.com/blog/beware-impostor-http-libraries-lurk-on-pypi