A arstechnica.com PyPI halted new users and projects while it fended off supply-chain attack 37 points consumer451 2 years ago 46 comments