[Distutils] Questionable package in PyPi, maybe malicious