Tag

PyPi

6 articles

Latest in PyPi

LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK

The massive supply-chain attack that compromised LiteLLM in the spring affected more than 2,500 companies and exposed about 434,000 CI/CD pipelines, with victims ranging from top-tier IT and AI companies to cybersecurity firms, Sa…

Aug 12, 20263 min

All PyPi Articles

Showing 1–6 of 6

Jul27

Blogs

GitHub and PyPI Bet On Time to Slow Down Software Supply Chain Attacks

GitHub and PyPI are using time as a security control, delaying dependency updates and locking older releases against new file uploads.

3 min

Jul06

Novee Uncovers Cordyceps: The Latest Threat to CI/CD Pipelines

A newly discovered supply chain security flaw is once again putting a spotlight on inherent weaknesses in CI/CD pipelines and the growing interest among cyberthreat actors to explo…

3 min

May25

US DoJ Makes PyPI Give Up User Data ¦ Tape Storage: Not Dead

In this week’s #TheLongView: PyPI complies with a “string of subpoenas,” and LTO continues to grow, despite predictions of its demise.

3 min

Feb16

Blogs

Dev of core-js Will Flip Table ¦ Another 451 PyPI Maldeps

In this week’s #TheLongView: Denis Pushkarev is fed up with core-js freeloaders, and hundreds more malicious packages found at PyPI.

3 min

Apr20

Features

Checkmarx Finds Malicious Open Source PyPi Repository

Checkmarx, a provider of a platform for testing application security, this week disclosed it has discovered a malicious instance of a PyPi repository for Python code that has been…

3 min