← Back to PyPI History
none✓ Resolved

Malicious takeover of ctx project on PyPI.

PyPI•
Status
resolved
Duration
Duration unavailable
Updates
2
Coverage
0 articles

INCIDENT TIMELINE

✓ Resolved
This incident has been resolved.
postmortem
Takeover of the ctx project was reported on multiple channels overnight and was mitigated as of 6:07 AM Eastern. We confirmed via investigation that this compromise was of a single user account due to re-registration over an expired domain. The domain that hosted the users email address was re-registered 2022-05-14T18:40:05Z and a password reset completed successfully for the user at 2022-05-14T18:52:40Z. Original releases were then deleted and malicious copies uploaded. PyPI itself was not directly compromised. Read the full incident report at [https://python-security.readthedocs.io/pypi-vuln/index-2022-05-24-ctx-domain-takeover.html](https://python-security.readthedocs.io/pypi-vuln/index-2022-05-24-ctx-domain-takeover.html).
resolved
This incident has been resolved.

📊 TECHNICAL DETAILS

Internal ID
acf24567-a7a6-449e-a912-edc3779606c5
External ID
s8vm6pwr46c2
🕐 Started
🔄 Last Updated
✓ Resolved
NONE
Impact Level
Duration unavailable
Total Duration
2
Status Updates
REQUEST COVERAGE
No article has been written for this incident yet. When 100 people request coverage, we request generation of one.
0 / 100 requests100 more needed