PyPI: Preventing ZIP parser confusion attacks on Python package installers from Hacker News on 2025-08-07 16:16 (#6Z60D) Comments