PyPI is preventing ZIP parser confusion attacks on Python package installers

[emmatyping (Emma Smith)]

Thanks so much to the team for working on this! It occurred to me a couple of months ago this could be a concern, so I’m glad to see this addressed!