Supply Chain Poisoning via PyPI Repository Compromise