PyPI suspends new user registration to block malware campaign

Japan warns of malicious PyPi packages created by North Korean hackers

Ars Technica used in malware campaign with never-before-seen obfuscation — Buried in URL was a string of characters that appeared to be random, but were actually a payload

Three Packages Targeting Linux with Crypto Miners Found in Python's 'PyPi' Repository