Unbelievable! And he even had the temerity to leave his email address. I'd be inclined to put his email address somewhere where the spammers will get ahold of it.
Anyway, clearly the bar needs to be raised for submitting a package on PyPI. Perhaps there should be a requirement to upload a valid setup.py file as part of the submission