A dozen malicious Python packages were uploaded to the PyPi repository this weekend in a typosquatting attack that performs DDoS attacks on a Counter-Strike 1.6 server. Python Package Index (PyPi) is ...
The Hacker Newsは7月10日(米国時間)、「PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects」において、PyPI (Python Package Index)リポジトリにある重要なプロジェクトのメンテナに対し、二要素認証(2FA: Two-Factor ...
ReversingLabsはこのほど、「When byte code bites: Who checks the contents of compiled Python files?」において、PyPI (Python Package ...
On Friday, the Python Package Index (PyPI), the official repository of third-party open-source Python projects announced plans to mandate two-factor authentication requirement for maintainers of ...
Security researchers have identified a previously unknown group dubbed "JuiceLedger" as the threat actor behind a recent and first-known phishing campaign specifically targeting users of the Python ...
鈴木たかのり (@takanory) です。今月の 「Python Monthly Topics」 では、Pythonのパッケージを公開するときに、デジタル証明書 (Digital attestations) を用いてより安全に公開する方法について紹介します。 PEP 740の提案とその背景 この機能はPEP 740によって2024年1月 ...