TLDR InfoSec · MISCELLANEOUS

PYPI USERS EMAIL PHISHING ATTACK

blog.pypi.org2 min read

Summary from the TLDR InfoSec newsletter

PyPI users are being targeted by phishing emails from "pypj[.]org" (note the "j"), which request email verification. The fake site mimics PyPI to steal credentials. Users should delete these emails, avoid clicking any links, and change their passwords if compromised.