The volume of malicious users and malicious projects being created on the index in the past week has outpaced our ability to respond to it in a timely fashion
They had this plan in place since earlier. They rolled it first to critical python libraries [1]. They even had agreement with google to provide free hardware security keys for free for those developers [2]
I've been trying to register because I just finished developing a command line tool that I thought others might want to use. Finding myself stymied here because registration has been closed since the 24th of November. Understandable if this a matter of people being still on vacation, or just back from ... but still, I am a bit frustrated.
4 comments
[ 2.8 ms ] story [ 25.6 ms ] threadAnything to do with the imminent mandatory 2FA? https://blog.pypi.org/posts/2023-05-25-securing-pypi-with-2f...
[1] https://www.malwarebytes.com/blog/news/2022/07/pypi-starts-r... [2] https://pypi.org/security-key-giveaway/