loongson/pypi: links for attack