Do Son
The Python Package Index (PyPI) has banned new account registrations and email additions from the inbox.ru domain,...
PyPI
Socket’s Threat Research Team has uncovered a malicious Python package named psslib designed to abruptly shut down...
Socket’s Threat Research Team has uncovered a sophisticated supply chain attack on the Python Package Index (PyPI)...
The Python Packaging Authority (PyPA) has patched a serious path traversal vulnerability in the widely-used setuptools project....
The ReversingLabs research team has uncovered yet another software supply chain attack targeting the cryptocurrency ecosystem, this...
In a detailed technical report, Socket’s Threat Research Team uncovered seven malicious Python packages published to the...
The Socket Threat Research Team has exposed three malicious open-source packages masquerading as developer tools — designed...
On April 14, 2025, the Python Package Index (PyPI) team swiftly addressed a security concern involving persisting...
Researchers at Socket have uncovered a series of malicious campaigns exploiting Out-of-Band Application Security Testing (OAST) techniques....
In a significant stride toward enhancing security in the Python ecosystem, the Python Package Index (PyPI) has...
Cybersecurity researchers at Fortinet have uncovered two malicious packages slithering within the Python Package Index (PyPI), ready...
Cybersecurity researchers at ReversingLabs have uncovered a stealthy supply chain attack targeting cryptocurrency wallets via the PyPI...
The Phylum Research Team has uncovered a malicious update to the PyPI package aiocpa, a crypto library...
Checkmarx Zero, the research arm of Checkmarx, has uncovered a new wave of malicious Python packages infiltrating...
In a recent report by Imperva Threat Research, malicious actors have been found exploiting the Python Package...
The JFrog security research team has uncovered a novel PyPI package hijacking method known as “Revival Hijack,”...
The FortiGuard Labs team has uncovered a series of malicious packages lurking within the Python Package Index...
In a recent investigation, ReversingLabs researchers uncovered a malicious open-source package on the Python Package Index (PyPI)...
The Phylum Research Team has uncovered a sophisticated attack targeting the Python Package Index (PyPI), a popular...
The Python Package Index (PyPi), a vital repository for open-source software, has taken the drastic step of...