Developers who published projects on PyPI with their email in package metadata are being targeted They are asked to "verify" ...

The uv utility lets you run Python packages and libraries with one command and no setup. Here's the quick guide to running Python packages without installing them.