Incident Report: Phishing Attack Over the past few days, a phishing attack targeting PyPI users via email was uncovered. Our initial report was posted to raise awareness of the attack, and to provide some initial details on the attack vector. Social media posts linking to the initial report have been shared widely, PyPI itself has not been breached with this attack.