Microsoft durabletask PyPI (1.4.1 to 1.4.3)

What happened

• Three versions uploaded within 35 minutes. Microsoft confirmed and yanked them.

Sources

• https://www.stepsecurity.io/blog/microsofts-durabletask-pypi-package-compromised-in-supply-chain-attack

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.