[Distutils] Re: Questionable package in PyPi, maybe malicious