#pypi resultados de búsqueda

No hay resultados para "#pypi"

Jonathan Peters

2 dic

We @nextronresearch scan many public repos like npm, pypi, vscode marketplace etc. And we find a lot of shitty malware :) Example: pypi.org/project/multit… SHA256: 79cc98d0831e7b6a191000ec997ebc1853b1f6cc1190dbb855b97d7bf418c287 #PyPi

cod3nym's tweet image. We @nextronresearch scan many public repos like npm, pypi, vscode marketplace etc.

And we find a lot of shitty malware :)

Example:
pypi.org/project/multit…

SHA256: 79cc98d0831e7b6a191000ec997ebc1853b1f6cc1190dbb855b97d7bf418c287

#PyPi

Vulnerbyte

@vulnerbyte

30 nov

⚠️ یک ضعف جدی در #PyPI کشف شد: اسکریپت‌های قدیمی #Python هنوز از دامنه رهاشده دانلود می‌کنن -> ریسک Domain Takeover و حمله #SupplyChain. همزمان، یک بسته مخرب جدید به نام spellcheckers با RAT فعال در PyPI کشف شد. #CyberSecurity #اخبار_امنیت_سایبری 👇 vulnerbyte.com/legacy-python-…

vulnerbyte's tweet card. محققان امنیتی ضعف مهمی را در بسته‌های قدیمی Python کشف کرده‌اند که به‌دلیل استفاده از یک دامنه رهاشده می‌تواند منجر به حمله Domain Takeover و آلوده‌سازی زنجیره تأمین PyPI شود. گزارش شامل بسته‌های...

ریسک تصاحب دامنه در بسته‌های قدیمی Python: اسکریپت‌های Bootstrap آسیب‌پذیر شناسایی شدند!

Fuente: vulnerbyte.com

X CyberSec

@xcybersecnews

29 nov

⚠️ Critical alert for #Python devs! Legacy bootstrap scripts are creating a serious domain-takeover risk in multiple PyPI packages. Time to audit your dependencies! #PythonSecurity #PyPI thehackernews.com/2025/11/legacy…

xcybersecnews's tweet card. Old Python bootstrap scripts and a malicious PyPI package expose developers to domain takeover and RAT risks.

Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

Fuente: thehackernews.com

ReversingLabs

@ReversingLabs

26 nov

⚠️ RL researchers have discovered vulnerable code in legacy #Python packages that could make possible an attack on #PyPI via a domain compromise. ⬇️ bit.ly/48jatP4

ReversingLabs's tweet card. Proving the road to takeover is paved with setuptools alternatives, the script for a popular Python package for building and installing PyPI packages leaves them vulnerable.

Bootstrap script exposes PyPI to domain takeover attacks | ReversingLabs

Fuente: reversinglabs.com

Nayjest

@nayjest

24 nov

Is anyone else experiencing the “PyPI is down for maintenance or is having an outage” message at the same time as some critical packages are being quarantined? #pypi #Python

ThreatCluster

@threatcluster

24 nov

Malicious PyPI package spotted stealing users' crypto info. Check your deps and lockfiles, not just your wallet. #infosec #PyPI threatcluster.io/cluster/hacker…

threatcluster.io

Hackers Use Malicious PyPI Package to Steal Cryptocurrency Information

Hackers have exploited a malicious package on the Python Package Index (PyPI) to steal cryptocurrency details from users. This attack targets individuals who do

Fuente: threatcluster.io

Red X

@AhmadMBashir2

17 nov

🚀 Just published PyThra v0.1.3 on PyPI! 🎉 My first ever Python package released to the world. A Flutter-like GUI framework for desktop apps, now installable with pip install pythra. pypi.org/project/pythra/ The journey starts here! 💻✨ #Python #OpenSource #PyPI

AhmadMBashir2's tweet image. 🚀 Just published PyThra v0.1.3 on PyPI! 🎉
My first ever Python package released to the world. A Flutter-like GUI framework for desktop apps, now installable with pip install pythra. pypi.org/project/pythra/

The journey starts here! 💻✨ #Python #OpenSource #PyPI

Scarab

@ScarabOfficial

14 nov

From the #pydantic #Python library page on #PyPi: '...but the error wasn't raised concistently.' If you have spelling errors in your code as you do in your documentation, then things may not work correctly. Just saying. <rolls eyes>

Scarab

@ScarabOfficial

14 nov

Imagine how good it would be if pages on #PyPi stated which versions things were built against, so you would know immediately instead of mangling your installations multiple times over while finding out the hard way... #Python #AI

Cognautic

@cognautic

7 nov

building, and much more! Try it now with a simple pip install cognautic-cli and leverage AI directly in your terminal. #CognauticCLI #PyPI #OpenSource #AI #DeveloperTools #PythonCLI #CodingAssistant #AIForDevelopers

Python Software Foundation

@ThePSF

4 nov

Even still, we’re raising the flag early: the PSF has only ~6 months of runway and needs your support to sustain essential #Python & #PyPI infrastructure, #PyConUS, and, hopefully, to reopen our Grants Program.