From the article:
GitLab's Vulnerability Research team has identified a sophisticated cryptocurrency theft campaign targeting the Bittensor ecosystem through typosquatted Python packages on PyPI.
Note that it's not necessarily anyone at PyPI doing this, but instead bad actors abusing the PyPI ecosystem.