Nice write up. The python software foundation is currently sponsoring work to bring additional cryptographic verification to pypi https://github.com/python/req

Nice write up. The python software foundation is currently sponsoring work to bring additional cryptographic verification to pypi https://github.com/python/request-for/blob/master/2019-Q4-PyPI/RFI.md https://github.com/python/request-for/blob/master/2019-Q4-Py... Some additional links wrt to other tools, techniques, and exploits on pypi security https://python-security.readthedocs.io/packages.html https://python-security.readthedocs.io/packages.html