Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedMediumNo fix needed

PyPI pauses new users and projects amid a flood of malware

PyPI

PyPI temporarily stopped new user registrations and new project names for about a day because malicious users and packages outpaced what its small admin team could handle.

Why this severity: Registry abuse; temporary registration freeze

Started
May 20, 2023
Closed
May 21, 2023

Follow this incident

Affected

Not published yet

Fixed in

No fixed release yet

Timeline2

  1. Registrations resume

    Source
  2. PyPI suspends new user and new project registration

    Source

Advisories1

News & write-ups1

Get an email when a new major security incident drops. No spam, unsubscribe any time.