PyPI malware campaign forced a 10-hour suspension of new projects and registrations

On March 28, the Python Package Index suspended new project creation and new user registration to mitigate an ongoing campaign that uploaded malicious typosquatting packages; the restrictions were lifted about 10 hours later. PyPI is developed and maintained by the Python Software Foundation, making the foundation the identifiable operator whose software-distribution service was materially restricted during the incident.