A pernicious potpourri of Python packages in PyPI The past year has seen over 10,000 downloads of malicious packages hosted on the official Python package repository ...

Do you have a Python application you want to give to the world, or at least your teammates? Here are six ways to package Python applications for distribution.

Two new packages were found on PyPIYou may like Python devs targeted with dangerous phishing attacks - here's how to stay safe Misspelled a site's name? Cybercriminals are exploiting this to ...

The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website.

Security firm Checkmarx found that one in three software packages from PyPI contains a flaw that can lead to malicious code being automatically installed. Many software packages from the Python ...

Python virtual environments shine for keeping projects and conflicting packages separate. Just keep these dos and don’ts in mind.

Cybersecurity researchers recently discovered half a dozen typosquatting packages in the official PyPI repository of the Python programming languages that contained cryptomining malware. The ...

Malicious Python packages found exfiltrating user data to Telegram bot Appears to be part of a wider operation by crime gang based in Iraq, say Checkmarx researchers ...

Two malicious packages are targeting Bitcoin developers, and another hitting WooCommerce stores.