Affected by the explosion of malicious programs, Python third-party suite repository PyPI stops registering and uploading files

CTOnews.com5, March 22, last Saturday (May 20), Python third-party software library PyPI announced that due to the discovery of a large number of malicious users and projects in the library, coupled with a number of managers on vacation, managers were unable to deal with emergencies effectively and timely, so they decided to temporarily register new users and upload files. Although PyPI regrouped over the weekend, it still suspended the registration of new users and new projects.

Many hackers upload malicious Python suites to PyPI in an attempt to plant malicious programs on developers' computers to steal developers' credentials, cryptocurrency wallets or other information. Before that, PyPI or information security usually published the names of malicious users or malicious projects, but this time there were too many to enumerate them. PyPI simply said that although it had been regrouped over the weekend, it still suspended the registration of new users and new projects. However, as of May 21, part of the library had been reopened.

PyPI, an acronym for Python Package Index library, is the officially certified third-party software suite repository for the Python programming language, which can access and download more than 450000 Python packages. CTOnews.com also reminds developers that when installing Python packages, it is recommended to choose packages from official sources as much as possible, and pay attention to searching for relevant information in the community.