PyPI halts new projects, users for 10 hours due to infostealer influx

A large typosquatting campaign on PyPI (27–28 Mar 2024) uploaded many malicious packages whose setup.py executed obfuscated, Fernet-encrypted code on install to download and decrypt an info‑stealer that harvests crypto wallets, browser cookies/extensions and credentials and implements persistence; PyPI temporarily suspended new project creation and registration and numerous malicious packages were removed, with IOCs and a package list provided.