{"id":"INC-pypi-3x5354l2m6zq","kind":"incident","aliases":[],"related":[],"title":"PyPI: PyPI Dictionary Attack","description":"This incident has been resolved.","summary":"PyPI reported a dictionary attack, a guessing campaign that tries common passwords against user accounts. The sources say the incident is resolved but give no detail on accounts compromised or data exposed.","severity":"low","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PyPI","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["incident","pypi","python","registry","security","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2022-11-11T22:24:42+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","triaged_at":"2026-10-25T05:41:41+00:00","updated_at":"2026-10-25T05:41:41+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-10-25T05:41:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"PyPI: dictionary attack against accounts, incident now resolved","impact":"low","summary":"PyPI reported a dictionary attack, a guessing campaign that tries common passwords against user accounts. The sources say the incident is resolved but give no detail on accounts compromised or data exposed.","category":"vendor","nicknames":[],"who_cares":["python","pypi"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"Read the statuspage incident at https://stspg.io/cn47g9c1mjlv for whether any accounts were compromised and whether PyPI asked users to reset passwords or enable 2FA.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000486,"input_tokens":3219,"output_tokens":329,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'3x5354l2m6zq':8A 'account':30B,43B 'attack':4A,20B 'campaign':23B 'common':26B 'compromis':44B 'data':46B 'detail':41B 'dictionari':3A,19B 'expos':47B 'give':39B 'guess':22B 'inc':6A 'inc-pypi-3x5354l2m6zq':5A 'incid':10B,35B,49C 'password':27B 'pypi':1A,2A,7A,9A,11B,16B 'python':12B 'registri':13B 'report':17B 'resolv':37B,52C 'say':33B 'secur':14B 'sourc':32B 'tri':25B 'user':29B 'vendor':15B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2022-11-11T22:24:42+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"pypi:3x5354l2m6zq","url":"https://stspg.io/cn47g9c1mjlv","severity":"low","published_at":"2022-11-11T22:24:42+00:00","modified_at":"2022-11-17T17:47:16+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","fetched_at":"2026-10-26T03:54:41+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}