PyPI, a major Python package repository, has temporarily halted new account and project registrations due to a significant cyberattack.

Over 500 fake packages were involved in the attack, utilizing 'typosquatting' to mimic trusted packages and target software developers.

The cyberattack aimed to distribute an infostealer malware with the ability to persist and harvest sensitive data, including passwords and cryptocurrency wallet information.

Following the attack, PyPI has reopened registrations, with the incident highlighting the persistent vulnerability of software supply chains.

The event emphasizes the critical need for enhanced scrutiny and curation of third-party packages to safeguard against software supply chain threats.