PyPI suspends new user registration to block malware campaign

PyPI temporarily suspended new user registrations and project creation after researchers discovered hundreds of typosquatted packages that include encrypted malicious setup.py code which dynamically constructs a URL to fetch an info‑stealer payload; the campaign (reported as 365–500+ packages) appears automated with unique maintainer accounts and identical malicious versions across packages and targets browser credentials, cookies, and cryptocurrency extensions.