You're looking at StableBuild's Deleted PyPI mirror - where we index all deleted packages from the Python package registry.
ufish was reported malicious
OSV:MAL-2026-5285 - Malicious code in ufish (PyPI)

ufish
0.1.0

This version was deleted from PyPI around 2026-06-06. Installing fails with:
$ pip3 install ufish==0.1.0 ERROR: Could not find a version that satisfies the requirement ufish==0.1.0

Install through StableBuild

You can install this package from StableBuild's PyPI snapshots from before the version was deleted:
pip3 install \ -i https://YOUR_API_KEY.pypimirror.stablebuild.com/2026-06-05/ \ ufish==0.1.0
Sign up for StableBuild to get an API key (it's free and takes <60 seconds!)

Or, download files manually

And install manually via pip: