AnecdoteArticle

As far as we are aware this has not yet been abused, but there is no technical reason beyond that attackers weren't aware it was possible.

Seth Larson notes that while the attack vector of poisoning old releases has not been observed in the wild, its absence is likely due to obscurity rather than technical barriers. ✦ AI generated

Seth Larson · Simon Willison's Weblog · 2026-07-23 · original ↗

Share card ↓Export .md Export .txt

As far as we are aware this has not yet been abused, but there is no technical reason beyond that attackers weren't aware it was possible.

Read full article ↗excerpt · fair-use quotation

▦ PyPI

Around this claim

Mechanism · 1

This restriction was put in place to prevent old and long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects were compromised.Seth Larson · Simon Willison's Weblog · conf 90%

Context · 1

The Python Package Index (PyPI) now rejects new files being uploaded to releases that are older than 14 days.Seth Larson · Simon Willison's Weblog · conf 80%