PyPI new user and new project registrations temporarily suspended
It&#x27;s only a matter of time until it happens to other systems too. Take rust for example where folks can install software via `cargo install &lt;global name package&gt;`.  Top that off with fact that during compile (as an attacker) you have full access to your victims computer[0].<p>Python just happens to have more popularity for now.<p>I think golang gets this right where you need the full package name to have it be usable with get&#x2F;build&#x2F;install commands.<p>---<p>0: <a href="https:&#x2F;&#x2F;doc.rust-lang.org&#x2F;cargo&#x2F;reference&#x2F;build-scripts.html" rel="nofollow">https:&#x2F;&#x2F;doc.rust-lang.org&#x2F;cargo&#x2F;reference&#x2F;build-scripts.html</a>