The Python Package Index (PyPI) has introduced new protections against domain resurrection attacks that enable hijacking ...

PyApp seems to be taking the Python world by storm, providing long-awaited click-and-run Python distribution. For developers ...

PyPI unverified 1,800 emails since June 2025 to block expired-domain attacks, strengthening open-source supply chain security.

To make mail hijacking more difficult, PyPI has been checking domain validity since June. In case of doubt, an abandoned email address loses its verification.