PyPI Repository temporarily suspends user sign-ups and package uploads due to ongoing attacks

21-May-23

The Python software repository’s sign-up and package upload functions have been temporarily disabled owing to an ongoing attack, according to PyPI’s maintainers. The decision to block the aforementioned features was made by the maintainers as a result of a recent rise in the number of malicious accounts and projects being created on the index.

“PyPI is temporarily suspending new user and new project name registration. Since several PyPI administrators have been on vacation, the number of malicious users and malicious projects that have been added to the index in the last week has outpaced our capacity to respond to them quickly. examines the Incident Report for Python Infrastructure that the maintainers have posted.

Read More…