PyPI unverifies 1,800 emails with expired domains to prevent attacks