TLDR · QUICK LINKS

PYPI HALTED NEW USERS AND PROJECTS WHILE IT FENDED OFF SUPPLY-CHAIN ATTACK

arstechnica.com7 min read

Summary from the TLDR newsletter

New project creation was halted on PyPI for around 10 hours while the site dealt with an onslaught of package uploads that executed malicious code on any device that installed them.