A phishing campaign is targeting users of the Python Package Index (PyPI) by threatening to remove their code packages if they don’t put it through a bogus validation process, PyPI administrators have warned.
PyPI administrators are alerting users about the repository — which enables Python developers to publish and find code packages to use for building software — of emails that claim they are implementing a “mandatory ‘validation’ process,” they said in a series of tweets outlining how the scam works.
