PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

The maintainers of the Python Package Index (PyPI) repository have issued a warning about an ongoing phishing attack that’s targeting users in an attempt to redirect them to fake PyPI sites.
The attack involves sending email messages bearing the subject line « [PyPI] Email verification » that are sent from the email address noreply@pypj[.]org (note that the domain is not « pypi[.]org »).
« This is