Preventing ZIP parser confusion attacks on Python package installersblog.pypi.org48 pointsmikethemana year ago