Read news on PyPI with our app.
Read more in the app
Claude uploaded malware to PyPI in Anthropic's botched test
Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
GitHub, PyPI add time-based defenses against supply chain attacks
Pyodide 314.0: Python packages can now publish WebAssembly wheels to PyPI
New Shai-Hulud attack trojanizes 19 science-focused PyPI packages
PyPI package with 1.1M monthly downloads hacked to push infostealer
Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach
Telnyx package compromised on PyPI
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens
Deno has made its PyPI distribution official
PyPI in 2025: A Year in Review
PyPI urges users to reset credentials after new phishing attacks
PyPI invalidates tokens stolen in GhostAction supply chain attack
PyPI now blocks domain resurrection attacks used for hijacking accounts
Preventing ZIP parser confusion attacks on Python package installers
Hackers target Python devs in phishing attacks using fake PyPI site
Making PyPI's test suite faster
Malicious PyPi package hides RAT malware, targets Discord devs since 2022
Carding tool abusing WooCommerce API downloaded 34K times on PyPI
Python's PyPI Finally Gets Closer to Adding 'Organization Accounts' and SBOMs
