PyPI, the default platform for Python's package management tools, is warning users of a fresh phishing campaign.