You're looking at StableBuild's Deleted PyPI mirror - where we index all deleted packages from the Python package registry.
spl-token was reported malicious
OSV:MAL-2024-10167 - Malicious code in spl-token (PyPI)

spl-token
0.1.2

This version was deleted from PyPI around 2024-03-29. Installing fails with:
$ pip3 install spl-token==0.1.2 ERROR: Could not find a version that satisfies the requirement spl-token==0.1.2

Install through StableBuild

You can install this package from StableBuild's PyPI snapshots from before the version was deleted:
pip3 install \ -i https://YOUR_API_KEY.pypimirror.stablebuild.com/2024-03-28/ \ spl-token==0.1.2
Sign up for StableBuild to get an API key (it's free and takes <60 seconds!)

Or, download files manually

And install manually via pip: