You're looking at StableBuild's Deleted PyPI mirror - where we index all deleted packages from the Python package registry.
ensmallen was reported malicious
OSV:MAL-2026-5315 - Malicious code in ensmallen (PyPI)

ensmallen
0.8.27

This version was deleted from PyPI around 2026-06-08. Installing fails with:
$ pip3 install ensmallen==0.8.27 ERROR: Could not find a version that satisfies the requirement ensmallen==0.8.27

Install through StableBuild

You can install this package from StableBuild's PyPI snapshots from before the version was deleted:
pip3 install \ -i https://YOUR_API_KEY.pypimirror.stablebuild.com/2026-06-07/ \ ensmallen==0.8.27
Sign up for StableBuild to get an API key (it's free and takes <60 seconds!)