PyPI packages hijacked after developers fall for phishing emails

“The email urges developers, who have their packages published to PyPI, to undergo a mandatory "validation" process or risk getting their packages purged...“

A phishing campaign caught yesterday was seen targeting maintainers of Python packages published to the PyPI registry.

Read More

More Articles About Phishing