#pypi 검색 결과

We @nextronresearch scan many public repos like npm, pypi, vscode marketplace etc. And we find a lot of shitty malware :) Example: pypi.org/project/multit… SHA256: 79cc98d0831e7b6a191000ec997ebc1853b1f6cc1190dbb855b97d7bf418c287 #PyPi

⚠️ یک ضعف جدی در #PyPI کشف شد: اسکریپت‌های قدیمی #Python هنوز از دامنه رهاشده دانلود می‌کنن -> ریسک Domain Takeover و حمله #SupplyChain. همزمان، یک بسته مخرب جدید به نام spellcheckers با RAT فعال در PyPI کشف شد. #CyberSecurity #اخبار_امنیت_سایبری 👇 vulnerbyte.com/legacy-python-…

⚠️ Critical alert for #Python devs! Legacy bootstrap scripts are creating a serious domain-takeover risk in multiple PyPI packages. Time to audit your dependencies! #PythonSecurity #PyPI thehackernews.com/2025/11/legacy…

⚠️ RL researchers have discovered vulnerable code in legacy #Python packages that could make possible an attack on #PyPI via a domain compromise. ⬇️ bit.ly/48jatP4

Is anyone else experiencing the “PyPI is down for maintenance or is having an outage” message at the same time as some critical packages are being quarantined? #pypi #Python

Malicious PyPI package spotted stealing users' crypto info. Check your deps and lockfiles, not just your wallet. #infosec #PyPI threatcluster.io/cluster/hacker…

🚀 Just published PyThra v0.1.3 on PyPI! 🎉 My first ever Python package released to the world. A Flutter-like GUI framework for desktop apps, now installable with pip install pythra. pypi.org/project/pythra/ The journey starts here! 💻✨ #Python #OpenSource #PyPI

From the #pydantic #Python library page on #PyPi: '...but the error wasn't raised concistently.' If you have spelling errors in your code as you do in your documentation, then things may not work correctly. Just saying. <rolls eyes>

Imagine how good it would be if pages on #PyPi stated which versions things were built against, so you would know immediately instead of mangling your installations multiple times over while finding out the hard way... #Python #AI

building, and much more! Try it now with a simple pip install cognautic-cli and leverage AI directly in your terminal. #CognauticCLI #PyPI #OpenSource #AI #DeveloperTools #PythonCLI #CodingAssistant #AIForDevelopers

Even still, we’re raising the flag early: the PSF has only ~6 months of runway and needs your support to sustain essential #Python & #PyPI infrastructure, #PyConUS, and, hopefully, to reopen our Grants Program.

pip protips #Python #PyPI

We @nextronresearch scan many public repos like npm, pypi, vscode marketplace etc. And we find a lot of shitty malware :) Example: pypi.org/project/multit… SHA256: 79cc98d0831e7b6a191000ec997ebc1853b1f6cc1190dbb855b97d7bf418c287 #PyPi

🚨 We discovered two malicious Python packages in #PyPI repository that remained undetected for over a year. These packages mimicked tools for working with popular AI language models (#ChatGPT and #Claude), silently exfiltrating data and compromising developer environments.…

#PyPI 上に悪意のあるパッケージが6つ見つかりました。背後にいる攻撃者は #W4SP の攻撃を模倣し、ユーザークレデンシャル、暗号ウォレット データなどを窃取していました。オープンソース エコシステムに台頭しつつある脅威の動向を解説します。 bit.ly/44CjShk

💣 Among others, @sekoia_io discovered yesterday 55 #PyPI malicious packages pushed by the same Threat actor. It's not the first time that we are seeing this actor pushing this kind of malicious packages. PyPI contacted and packages removed 👌 Related packages and IoCs below ↘️

3 BILLION 🤯🍾 #python #pypi #attrs pepy.tech/project/attrs

I was annoyed of having to write README files for my projects. So I went ahead and created a CLI tool to auto-generate README files for any project regardless of programming language! 📜✨ It creates a comprehensive README based on your project. Check it out on #PyPI and #npm

⚠️🧵 RL researchers detected a new malicious campaign targeting #PyPI users. Several packages are pretending to be "time" related utilities, but are actually used to steal sensitive data like cloud tokens.

#Python: #PyPI temporarily shuts down new project creation and new user registration to mitigate an ongoing #malware upload campaign:

Looking back at 2023 @mikefiedler discovered some impressive metrics that we want to share! @fastly #PyPI #pytho

🔍Researchers have discovered a concerning surge in deceptive #npm and #PyPI packages distributed as part of a malicious campaign, aimed at extracting #Kubernetes configurations and #SSH keys. Read more👇 socradar.io/new-campaign-d… #cybersecurity #devops #supplychain #datatheft

Pypi is having severe problems with malware and malicious projects 😞🤬 be careful #python #pypi

#PyPI A good blog post with analysis of #malicious #Python packages in PyPI by the @eset research team: #SoftwareSupplyChainSecurity 👇 welivesecurity.com/en/eset-resear…

🚨Over 22k packages are vulnerable (or over 120k by looser measurement) to a new #SoftwareSupplyChain attack vector: Hijacking abandoned #PyPI packages. Potentially critical for orgs relying on abandoned packages, learn more about our team's discovery: jfrog.co/4gpsbUH

Is it possible to encounter #malware on #PyPI? Learn how CloudGuard Spectralops.io - A Check Point Solution detected a malicious package on the leading #Python repository: bit.ly/3Zgo5V7

⚠️🧵 RL threat researchers detected an impersonation attempt targeting a popular #PyPI cloudscraper package with more than 50M downloads. It has the suffix "safe" added, but it is all but safe: secure.software/pypi/packages/…

🔍Recently, researchers identified three malicious #Python packages on the #PyPI, tied to #VMConnect campaign, and attributed it to the #LazarusGroup. 🔻Explore our #APT profile to gain insights into #Lazarus and learn about the campaign: 🔗socradar.io/apt-profile-wh…

PyPI suspends new projects and users due to malicious activity developer-tech.com/news/2023/may/… #pypi #python #cybersecurity #infosec #security #hacking #coding #programming #news #tech #technology

Hello Wednesday github.com/pypa/wheel/iss… #pip #pypi @pypi @ThePSF

#PyPi update from @Ax_Sharma. 🧐 👉 bit.ly/45m4XsG