---
title: PyPI Warns Developers of Active Phishing Campaign Using Fake Verification Emails
description: PyPI warns Python developers of an active phishing campaign using fake verification emails and lookalike domains. Learn how to protect your account and software supply chain.
canonical_url: https://codekeeper.co/ticker/pypi-warns-of-active-phishing-campaign-using-fake-verification-emails
---

[Cyberattacks](https://codekeeper.co/ticker/tag/cyberattacks)

# PyPI Warns Developers of Active Phishing Campaign Using Fake Verification Emails

PyPI warns Python developers of an active phishing campaign using fake verification emails and lookalike domains. Learn how to protect your account and software supply chain.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Jul 29, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

The Python Package Index (PyPI) is warning developers about an ongoing phishing campaign targeting their accounts. Attackers are sending fake verification emails and using lookalike domains to steal credentials from Python developers. The fraudulent emails appear legitimate but direct users to malicious sites designed to harvest login information. PyPI officials are urging developers to verify email authenticity before clicking links and to enable two-factor authentication. This campaign specifically targets the Python development community, potentially compromising software supply chains if successful. Source: [The Hacker News](https://thehackernews.com/2025/07/pypi-warns-of-ongoing-phishing-campaign.html)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fpypi-warns-of-active-phishing-campaign-using-fake-verification-emails%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Cyberattacks Magento Zero-Day Under Attack, No Adobe Fix in Sight Sep 7, 2026](https://codekeeper.co/ticker/stylesmuggler-zero-day-magento-vulnerability)

[Cyberattacks Iran-Linked Hackers Blamed for Taking a British Power Plant Offline for Four Days Aug 24, 2026](https://codekeeper.co/ticker/iranian-hackers-hit-uk-power-plant)

[Japan's Military Unknowingly Used Chinese Malware-Infected USB Drives for Nearly a Year Aug 12, 2026](https://codekeeper.co/ticker/jgsdf-malware-infected-usb-drives-expose-classified-data)

[Vulnerabilities CISA Flags ScreenConnect Flaw Exploited Since August Sep 22, 2026](https://codekeeper.co/ticker/cisa-screenconnect-critical-flaw-exploitation)