Neowin News Feed for: Pypi

Python developers, uninstall this malicious package right now

Usama Jawad — Mon, 02 Jan 2023 15:24:01 +0000

Python developers who spent some time coding over the holiday break may want to check out an advisory regarding a malicious PyTorch package that was being fetched from PyPI last week. Read more...

Package Analysis Project: Google will help detect malicious open source packages

Usama Jawad — Fri, 29 Apr 2022 07:58:01 +0000

Google has pledged support for OpenSSF's Package Analysis Project for open source packages uploaded to popular repositories. It has also published the results which paint a rather interesting picture. Read more...

Official Python repository used to distribute cryptomining malware

Chris Dupres — Thu, 24 Jun 2021 05:58:02 +0000

The official Python software repository, PyPI, was discovered to host six packages that would download and install cryptomining software on affected systems according to a new report. Read more...