Stories by miketheman

PyPI: Preventing Domain Resurrection Attacks

PyPI now serves project status markers in API responses

Preventing ZIP parser confusion attacks on Python package installers

PyPI Phishing Attack: Incident Report

PyPI Users Email Phishing Attack

PyPI Prohibits inbox.ru email domain registrations

AWS Lambda standardizes billing for INIT Phase

PyPI Blog: Project Quarantine

PyPI now supports digital attestations

PyPI Safety and Security Engineer: First Year in Review

PyPI Blog: Malware Distribution and Domain Abuse

2FA Required for PyPI

2FA Requirement for PyPI begins 2024-01-01

Support Python in 2023 (fundraiser and membership drive)

TestPyPI now requires 2FA in advance of PyPI 2024 requirement

PyPI has completed its first security audit

PyPI Reports on Inbound Malware Notices

GitHub now scans public issues for PyPI secrets

PyPI Requires 2FA for New User Registrations

PSF Hires PyPI Safety and Security Engineer

1