there's a json file on GitHub referencing the download of the source archive, stored on pypi infra.
in the tgz you can download from pypi you can find python code containing the secret.
https://github.com/orf/pypi-data/blob/main/release_data/i/h/...