Phishing emails mimicking PyPI target developers to steal credentials via fake sites. Users urged to stay alert.

You'll want to own all four, since they move at least somewhat independently of one another, making them all easier to stick ...