Bootstrap script exposes PyPI to domain takeover attacks https://www.securitricks.com/reports/bootstrap-script-exposes-pypi-to-domain-takeover-attacks/