This typosquatting attack is targeting Python’s top packages such as idna, flask, docutils and more with over 500 million monthly downloads combined.