A PyPI typosquatting campaign post-mortem | Hacker News Reader