Python Package Index Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers in Supply Chain Attacks

The Python Package Index (PyPI) has implemented new security measures to mitigate supply chain attacks by blocking over 1,800 email addresses associated with expired domains. This move addresses a vulnerability where attackers could hijack Python packages by registering expired domains to intercept account reset emails. While this enhancement improves account security, it is not a comprehensive solution to all supply chain threats. Separately, the Seamless Community Discord experienced a brief security compromise but has since been secured and restored to normal operation.