Voozh

3 min read

👁 Extract by Zyte logo
👁 john_rooney profile

John Rooney

for Extract by Zyte

May 11

How to write and publish a Python package to PyPI

#python #uv #pypi #programming

Add Comment

12 min read

👁 trknhr profile

Teruo Kunihiro

May 13

TanStack Was Not the Whole Story: Mini Shai-Hulud Was an npm/PyPI Supply-Chain Worm

#security #npm #pypi #githubactions

👁 Image
👁 Image
👁 Image
6 reactions

2 comments

8 min read

👁 romdevin profile

Roman Dubrovin

Apr 7

Malicious PyPI Package Squatting: AGPL-3.0 Violations and Reputation Attacks Addressed with Legal and Community Action

#pypi #agpl30 #malware #opensource

Add Comment

9 min read

👁 romdevin profile

Roman Dubrovin

Apr 4

Analyzing PyPI and piwheels Data: Comprehensive Statistical Insights on Package Names, Versions, and Distribution Patterns

#python #pypi #versioning #naming

Add Comment

6 min read

👁 kornilovconstru profile

Artyom Kornilov

Mar 27

PyPI Compromised: Malicious Code in `telnyx` Packages Leads to Credential Theft and Malware Installation

#security #pypi #malware #steganography

Add Comment

15 min read

👁 romdevin profile

Roman Dubrovin

Mar 26

Malicious litellm Python Package Versions 1.82.7 and 1.82.8 Removed from PyPI to Prevent Credential Theft

#security #malware #pypi #dependencies

Add Comment

6 min read

👁 kornilovconstru profile

Artyom Kornilov

Mar 24

Compromised Litellm PyPI Packages (v1.82.7, v1.82.8) Expose Users to Security Risks: Mitigation Steps Available

#security #pypi #malware #compromise

Add Comment

12 min read

👁 alanwest profile

Alan West

Mar 25

How to Detect and Recover From a Compromised PyPI Package

#python #security #supplychain #pypi

Add Comment

5 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

URL: https://dev.to/t/pypi

⇱ Pypi - DEV Community

从 Cython 编译到 PyPI 发布 — 一个 Python SDK 的 CI 连环坑

How to write and publish a Python package to PyPI

TanStack Was Not the Whole Story: Mini Shai-Hulud Was an npm/PyPI Supply-Chain Worm

Malicious PyPI Package Squatting: AGPL-3.0 Violations and Reputation Attacks Addressed with Legal and Community Action

Analyzing PyPI and piwheels Data: Comprehensive Statistical Insights on Package Names, Versions, and Distribution Patterns

PyPI Compromised: Malicious Code in `telnyx` Packages Leads to Credential Theft and Malware Installation

Malicious litellm Python Package Versions 1.82.7 and 1.82.8 Removed from PyPI to Prevent Credential Theft

Compromised Litellm PyPI Packages (v1.82.7, v1.82.8) Expose Users to Security Risks: Mitigation Steps Available

How to Detect and Recover From a Compromised PyPI Package