Typosquatting Campaign Targets Python Developers

On 26 March 2024, Phylum’s automated risk detection platform picked up yet another typosquat campaign targeting some attackers’ favorite targets in PyPI. As of writing, this attack still appears to be active and has come in two big waves after about a 20-hour break in between. So

attack attackers automated big break in campaign detection developers march phylum platform pypi python research risk targeting typosquatting writing