Get the latest tech news
PyPI Blog: Project Quarantine
Handling project quarantine lifecycle status for suspected malware
One idea was to add a new authenticated API endpoint to allow querying the current list of quarantined Projects, and supply links to their Releases and Files for consumption. Since the point of the implementation is to allow PyPI Admins to manage the state, and oftentimes during nights, weekends, and holidays, and from a phone web browser, I wanted to make the interface as simple as possible. We also allow any authenticated PyPI user to submit a malware report via a web form on a Project's page (technically a Release... but that's a different story).
Or read this on Hacker News