Members of the North Korean hacker group Lazarus posing as recruiters are baiting Python developers with coding test project for password management products that include malware.

The Python Package Index (PyPI) has introduced new protections against domain resurrection attacks that enable hijacking ...

A new malware campaign has affected users globally, stealing sensitive data. Identified as PXA stealer, this Python-based ...

4,000 Google Titan security keys should help to protect critical Python projects from software supply chain attacks. Written by Liam Tung, Contributing Writer July 11, 2022, 8:00 a.m. PT ...

PyPI unverified 1,800 emails since June 2025 to block expired-domain attacks, strengthening open-source supply chain security.

Security researchers from Check Point have spotted 10 malicious packages on Python Package Index (PyPI), the primary Python package index used by Python developers. The first of them was Ascii2text, a ...

Security researchers have discovered a total of 3938 unique secrets on PyPI, the official third-party package management system for the Python community, across all projects, with 768 of them ...

In the first half of 2020, Pysa detected 44% of all security bugs in Instagram's server-side Python code.