PyPI Phishing Attack: Incident Reportblog.pypi.org 8 pointsmiketheman1 year ago1 commentSaveHideCopy link On HNComments−zahlman1yThis is a follow-up to the recent reporting on a phishing attack on PyPI (cf. https://news.ycombinator.com/item?id=44701913 ; https://news.ycombinator.com/item?id=44711408 ; https://news.ycombinator.com/item?id=44738345). It turns out that the compromise of the `num2words` package (cf. https://news.ycombinator.com/item?id=44712736) was a direct result of the attack (as I vaguely suspected).
Comments
This is a follow-up to the recent reporting on a phishing attack on PyPI (cf. https://news.ycombinator.com/item?id=44701913 ; https://news.ycombinator.com/item?id=44711408 ; https://news.ycombinator.com/item?id=44738345). It turns out that the compromise of the `num2words` package (cf. https://news.ycombinator.com/item?id=44712736) was a direct result of the attack (as I vaguely suspected).