Tweakers

PyPI laat beheerders Python-packages als gearchiveerd aanmerken

De Python Package Index, PyPI, gaat ontwikkelaars de mogelijkheid bieden om oude projecten te archiveren. Daarmee kunnen ze duidelijk aangeven aan gebruikers dat er geen updates meer komen. Volgens ...
Bleeping Computer

Hackers target Python devs in phishing attacks using fake PyPI site

The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website. PyPI is a ...
Computer Weekly

PyPI loophole puts thousands of packages at risk of compromise

Thousands of applications that have taken advantage of open source Python Package Index (PyPI) software packages may be at risk of hijacking and subversion by malicious actors, opening up the ...
SiliconRepublic

The security flaw that Python developers should be aware of

Security firm Checkmarx found that one in three software packages from PyPI contains a flaw that can lead to malicious code being automatically installed. Many software packages from the Python ...
Analytics India Magazine

Python Foundation Gets $1.5 Mn Investment From Anthropic

Anthropic is planning to invest $1.5 million in the Python Software Foundation (PSF) to support security in the Python ...

Anthropic backs Python security with $1.5 million PSF partnership

Anthropic has committed $1.5 million to the Python Software Foundation (PSF) under a two-year partnership aimed at strengthening security across Python’s core infrastructure and package ecosystem. The ...