Developers who published projects on PyPI with their email in package metadata are being targeted They are asked to "verify" ...

The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing ...

Phishing emails mimicking PyPI target developers to steal credentials via fake sites. Users urged to stay alert.