Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Pypi, Package, Malicious. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Programming, Web Development, Open-... > Python, Machine Learning, Web Devel... > Python, Pypi, Development, Packagin... > Pypi, Package, Malicious

Articles

Removing PGP from PyPI

See discussion (187 comments, 187 points) - Archive

PGP signatures on PyPI: worse than useless

See discussion (163 comments, 93 points) - Archive

Compromised PyTorch-nightly dependency chain December 30th, 2022

See discussion (2 comments, 191 points) - Archive

Compromised PyTorch-nightly dependency chain between December 25th – December 30

See discussion (175 comments, 327 points) - Archive

Python malware starting to employ anti-debug techniques

See discussion (104 comments, 143 points) - Archive

Dozens of malicious PyPI packages discovered targeting developers

See discussion (321 comments, 754 points) - Archive

PyPI: Python packets steal AWS keys from users

See discussion (100 comments, 168 points) - Archive

The Python Package Index is now a GitHub secret scanning integrator

See discussion (114 comments, 372 points) - Archive

Finding secrets by decompiling Python bytecode in public repositories

See discussion (51 comments, 165 points) - Archive

Two malicious Python libraries caught stealing SSH and GPG keys

See discussion (317 comments, 624 points) - Archive

Malicious Python libraries found and removed from PyPI

See discussion (31 comments, 101 points) - Archive

Malicious software libraries found in PyPI posing as well known libraries

See discussion (245 comments, 475 points) - Archive

Analyzing Django requirement files on GitHub

See discussion (30 comments, 143 points) - Archive

Show HN: A curated list of insecure Python packages

See discussion (12 comments, 94 points) - Archive

PyPI has completed its first security audit

See discussion (22 comments, 137 points) - Archive