PyPI halts new user registration and project creation due to a malware campaign.

Attackers uploaded over 365 malicious packages using automation and typosquatting.

The incident highlights a broader pattern of attacks against open source repositories.

There's a heightened focus on the need for stringent verification of software components.

PyPI introduces mandatory two-factor authentication for project maintainers to enhance security.

Ongoing threats persist against package repositories and software supply chains.