If you recently got an email asking you to verify your credentials to a PyPI site, better change that password ...