Mike Fiedler

miketheman.com

28 July 2025 15:02

Always verify the domain is pypi.org before logging in. Read more: blog.pypi.org/posts/2025-0...

Mike Fiedler

miketheman.com

28 July 2025 15:02

Heads Up, #Python Developers! There is an active phishing attack targeting PyPI users. • Threat: Emails from noreply@pypj.org (with a 'j') link to a fake login page. • Action: Do not click any links. If you already did, change your PyPI password ASAP. • Note: PyPI itself has not been breached.

William Woodruff (1.3.6.1.4.1.55738)

yossarian.net

12 May 2025 13:58

my colleague @darkamaul.bsky.social has a new blog post on the @trailofbits.bsky.social blog about how we worked with @pypi.org's maintainers to slash test times on PyPI by over 80%: blog.trailofbits.com/2025/05/01/m...

Chris Holdgraf

choldgraf.com

14 April 2025 23:16

Just want to give a shoutout to the @pypi.org team for being really professional about disclosing (in private) and then reporting on a recent security incident on PyPI. Really appreciate the work you all are doing <3 blog.pypi.org/posts/2025-0...

William Woodruff (1.3.6.1.4.1.55738)

yossarian.net

03 February 2025 17:49

you can now archive projects on @pypi.org! this work was done by my teammate Facundo @trailofbits.bsky.social and is part of a larger multi-year arc of work dedicated to landing security and usability improvements on PyPI: blog.trailofbits.com/2025/01/30/p...