root/pypi: links for malicious-pip-package-for-demo