PyPI — the Python Package Index — is the official repository of software for the Python programming language. It helps you find and install software developed and shared by the Python community, and ...
Multiple malicious Python packages available on the PyPI repository were caught stealing sensitive information like AWS credentials and transmitting it to publicly exposed endpoints accessible by ...
PyPI is popular among Python programmers for sharing and downloading code. Since anyone can contribute to the repository, malware – sometimes posing as legitimate, popular code libraries – can appear ...
Source distributions (sdist) can execute arbitrary code during installation via setup.py, making them a common attack vector for supply chain attacks. Unlike pre-built wheels, source distributions ...
A malicious Python package targeting Discord developers with remote access trojan (RAT) malware was spotted on the Python Package Index (PyPI) after more than three ...
Anaconda now hosts 2,500 Arm packages, while NumPy and SciPy publish native wheels to aid data scientists migrating off emulation.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results