Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens for the clues of crucian carp snow fox to deliver! CTOnews.com, May 29, Python third-party suite repository PyPI (Python Package Index) announced in its official blog that in order to improve the security of the platform, 2FA must be enabled for any project or organization account maintenance on PyPI.

This mandatory requirement will take effect by the end of 2023, and all software publishers will need to enable this login authentication in the future, otherwise they will not be able to log in to the account.

The number of malicious users and projects of ▲ image source PyPI was once beyond the reach of PyPI administrators, and some malicious programs even caused it to be subpoenaed by the US Department of Justice. CTOnews.com also reported a few days ago that PyPI had to shut down new user registration and new project upload functions because of malware.

"enforcing 2FA on all accounts is part of a long-term commitment to enhance platform security to prevent the disclosure of credentials and API tokens and reduce the amount of malware," the PyPI team said.

PyPI will begin to restrict access to certain site features based on 2FA usage. If some software packages have frequent security problems, PyPI may implement mandatory 2FA measures in advance.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.