Given how widespread Python is, developers should vet any third-party code they use before adding it to their projects. ESET firmly believes the abuse of PyPI will continue.

Cybersecurity company Trellix announced Wednesday that a known Python vulnerability puts 350,000 open-source projects and the applications that use them at risk of device take over or malicious ...

PyPI halted new users and projects while it fended off supply-chain attack Automation is making attacks on open source code repositories harder to fight.

The Python Package Index (PyPI) has introduced new protections against domain resurrection attacks that enable hijacking ...

Interestingly, in some cases the Python code in the source distribution differs from the built distribution. The former is clean, while the latter contains the malicious code.

A 15-year-old vulnerability in the open source Python programming language is still finding its way into live code, with the result that over 350,000 projects are at risk of potential supply chain ...

Python is the most widely used language in machine learning projects. One factor behind its popularity is that it has a concise syntax, which reduces the amount of code developers must write.