PyPl is blocking expired domains to halt malware attacks

It should be a capital I, not lowercase l in the organization name. They have it right consistently within the article, but not in its title or slug. They're also reposting it from "the hacker news" which to me looks much more interested in SEO than reputation (although they did get the spelling right).

I think PyPI's own announcement is a better source for this: https://blog.pypi.org/posts/2025-08-18-preventing-domain-res...

It was also shared on the official forums: https://discuss.python.org/t/announcement-pypi-prevents-doma...