Record · corpus.blog/posts/01a07df1-ef52-7079-bdf6-ecb7f81e6017

PyPI Phishing Attack: Incident Report

PyPI Blog · published 31 July 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.pypi.org Wayback capture

3blogs citing

First cited: 21 Nov 2025
Most recent: 31 Dec 2025
Rank this month: not ranked
Links from this post: 17
Words captured: 2,086

Cited by

Blog

In the post

Date

duckalignment.academy

Reviewing open source trends in 2025 Read at the source ↗

31 Dec 2025

Michael Kennedy

Python Supply Chain Security Made Easy Read at the source ↗

23 Dec 2025

woodruffw

We should all be using dependency cooldowns Read at the source ↗

21 Nov 2025

Links from this post

Link

Host

https://www.bleepingcomputer.com/news/security/popular-npm-linter-packages-hijacked-via-phishing-to-drop-malware/

bleepingcomputer.com

https://capec.mitre.org/data/definitions/94.html

capec.mitre.org

https://pypi.org/help/

pypi.org

https://www.w3.org/TR/webauthn-2/

w3.org

https://discuss.python.org/t/pypi-org-phishing-attack/100267

discuss.python.org

https://www.python.org/psf/trademarks/

python.org

https://mail.python.org/mailman3/lists/pypi-announce.python.org/

mail.python.org

https://mail.python.org/mailman3/lists/security-announce.python.org/

mail.python.org

https://github.com/pypi/warehouse/pull/18427

github.com

https://nitter.tiekoetter.com/SFLinux/status/1949906299308953827

nitter.tiekoetter.com

https://osv.dev/vulnerability/PYSEC-2025-72

osv.dev

https://postmarkapp.com/glossary/sender-policy-framework

postmarkapp.com

https://dkim.org/

dkim.org

https://dmarc.org/

dmarc.org

https://github.com/pypi/warehouse/issues

github.com

https://www.python.org/psf/

python.org

https://capec.mitre.org/data/definitions/98.html

capec.mitre.org