If you recently got an email asking you to verify your credentials to a PyPI site, better change that password ...
Developers who published projects on PyPI with their email in package metadata are being targeted They are asked to "verify" their email address with a fake PyPI platform The "verification" process ...