Loading story…
Threat actors launched a phishing campaign targeting Python Package Index (PyPI) users by sending emails that impersonate official communications and direct recipients to a fake login site at pypi-mirror.org. The emails claim to require account verification for maintenance and security, threatening account suspension to coerce users into entering their credentials. The Python Software Foundation (PSF) has warned that compromised credentials could be used to tamper with existing packages or publish malicious ones, potentially impacting the broader Python ecosystem. PSF has advised affected users to reset their passwords, review account security history, and report suspicious activity, while also working to take down malicious domains and strengthen two-factor authentication protections. A similar phishing attempt using the domain pypj.org was observed in July, indicating an ongoing threat to PyPI maintainers and users.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
The Python Software Foundation and PyPI warned users about the phishing campaign and advised affected users to reset their credentials. The warning highlighted the risk of stolen login details from the spoofed PyPI site.
A phishing campaign used a fake PyPI login site to steal user credentials from Python package repository users. The activity was described as a new wave of attacks targeting the PyPI ecosystem.
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcehackread.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Python Software Foundation invalidated all PyPI tokens stolen in the GhostAction supply chain attack, confirming no malicious packages were published using the compromised credentials. Over 3,300 secrets, including API tokens and credentials across multiple ecosystems, were exfiltrated via malicious GitHub Actions workflows. PyPI maintainers are advised to switch to short-lived Trusted Publishers tokens and review account security.
Jun 29, 2026A phishing campaign is targeting crates.io users with emails impersonating the Rust Foundation, urging recipients to log in to protect their packages. The emails originate from rustfoundation.dev, a domain not controlled by the Rust Foundation, and aim to steal GitHub credentials. There is no evidence of a compromise of crates.io infrastructure, and the Rust team is working to take down the phishing domain and monitor for suspicious activity.
Jun 29, 2026
The Python Software Foundation disclosed a **critical authentication bypass** in the `python.org` release management API that could have let attackers forge administrator-level requests and modify Python release metadata. The flaw, reported by Splitline Ng of DEVCORE and confirmed by the Python Security Response Team, could have enabled changes to download and verification URLs for official Python installers, creating a path to distribute tampered files through trusted `python.org` infrastructure. The vulnerable logic reportedly dated back to 2014, affecting the release pipeline for more than a decade, but maintainers said post-incident forensics found **no evidence of exploitation**. The PSF patched the issue rapidly, with production fixes deployed within 24 hours and broader remediation completed within 48 hours, while also disabling risky API behavior and tightening release controls. Additional hardening included stricter URL validation, mandatory HTTPS enforcement, negative authentication test coverage, longer log retention, and stronger provenance measures around release artifacts, including emphasis on **Sigstore** alongside existing **PGP** signing. A subsequent Trail of Bits review funded by OpenAI reportedly found no additional authentication or authorization flaws, and the Foundation said the changes were designed to reduce the risk of unauthorized modification of Python downloads distributed via official channels.
Jul 12, 2026