Python devs targeted with dangerous phishing attacks - here's how to stay safe

Someone is spoofing PyPI.org in an attempt to grab login credentials, experts warn.