OVER 170K USERS AFFECTED BY ATTACK USING FAKE PYTHON INFRASTRUCTURE

Summary from the TLDR InfoSec newsletter

This post reports on a sophisticated cyber attack campaign that affected over 170,000 users by using fake Python infrastructure. The attackers employed various tactics such as account takeovers, contributing malicious code, setting up a custom Python mirror, and publishing malicious packages to the PyPi registry. They also hijacked GitHub accounts, published malicious Python packages, and used social engineering schemes.