PyPI Phishing Attack: Incident Report - The Python Package Index Blog
blog.pypi.org
Follow-up on the recent phishing attack targeting PyPI users.