“This domain selection is a clever typosquat of the official Python mirror "files.pythonhosted.org," as the latter is where the official artifact files of PyPi packages are typically stored.”
The attacker registered files.pypihosted.org, served a poisoned colorama under the real name, and pointed requirements files at it. pip lets any requirements file pull from any URL, so nobody checked. A hijacked contributor account pushed it into Top.gg, a GitHub community of over 170,000 users, with verified commits. A green verified badge proves the cookie was stolen from the right person.