TLDR InfoSec · MISCELLANEOUS
PYPI USERS EMAIL PHISHING ATTACK
Summary from the TLDR InfoSec newsletter
PyPI users are being targeted by phishing emails from "pypj[.]org" (note the "j"), which request email verification. The fake site mimics PyPI to steal credentials. Users should delete these emails, avoid clicking any links, and change their passwords if compromised.