Today we received reports of a phishing campaign targeting PyPI users. This is the first known phishing attack against PyPI.
We’re publishing the details here to raise awareness of what is likely an ongoing threat.
We’ve begun rolling out a 2FA requirement: soon, maintainers of critical projects must have 2FA enabled to publish, update, or modify them.
To ensure that these maintainers can use strong 2FA methods, we're also distributing 4000 hardware security keys!
Welcome to the home of pypi.org on twitter!
You can follow here for announcements about the package index as well as interesting things going on in the Python packaging ecosystem.
In total PyPI served 324.1 petabytes in 2021, that's an average bandwidth of 82.2 Gbps for the entire year.
We and the entire Python community owe @fastly immense gratitude for providing this CDN service, their support makes PyPI as you know it possible.
The answer is:
One hundred twenty-six billion five hundred forty-five million seven hundred seventy thousand and sixty-six downloads accounted for in 2021.
126,545,477,066
Thanks @googlecloud BigQuery for making it possible for us to track this scale. packaging.python.org/en/latest/guid…
With one week left in our security key giveaway, we've decided to open up eligibility to any existing PyPI user.
Get yours while supplies last, and before the giveaway ends when the codes expire on Oct 1st.
