Malicious PyPI package soopsocks downloaded 2,653 times before takedown, exfiltrating Windows data to Discord.

Several harmful Python .whl files containing a new type of malware called “Kekw” have been discovered on PyPI (Python Package Index). According to new data by Cyble Research and Intelligence Labs ...

A new Python library streamlines how engineers and developers script, automate, and analyze data from PicoScopes, bringing ...

If you recently got an email asking you to verify your credentials to a PyPI site, better change that password ...

Pico Technology has officially released pyPicoSDK, a new Python package designed to simplify the use of PicoScopes. Built on top of the existing PicoSDK, pyPicoSDK permits engineers, developers and ...

In a new twist on software supply chain attacks, researchers have discovered a Python package hiding malware inside of compiled code, allowing it to evade ordinary detection measures. On April 17, ...

Package your Python applications for redistribution with one click, no compiling, and almost no additional software.

PyPI, the default platform for Python's package management tools, is warning users of a fresh phishing campaign.

The uv utility lets you run Python packages and libraries with one command and no setup. Here's the quick guide to running Python packages without installing them. Astral’s uv tool makes setting up ...

Check Point Research has detected a malicious open source code package that uses steganography to hide malicious code inside image files. The malicious package was available on PyPI, a package index ...