PyPI Python Package Repository Patches Critical Supply Chain Flaw