Bleeping Computer

Malicious PyPi packages aim DDoS attacks at Counter-Strike servers

A dozen malicious Python packages were uploaded to the PyPi repository this weekend in a typosquatting attack that performs DDoS attacks on a Counter-Strike 1.6 server. Python Package Index (PyPi) is ...
マイナビニュース

PyPIが重要なプロジェクトに対し、二要素認証を義務化

The Hacker Newsは7月10日(米国時間)、「PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects」において、PyPI (Python Package Index)リポジトリにある重要なプロジェクトのメンテナに対し、二要素認証(2FA: Two-Factor ...
livedoor ニュース

悪意あるPython コードを用いたPyPIに対する新しい攻撃、発覚

ReversingLabsはこのほど、「When byte code bites: Who checks the contents of compiled Python files?」において、PyPI (Python Package ...
Security Boulevard

No Off Season: Three Supply Chain Campaigns Hit npm, PyPI, and Docker Hub in 48 Hours

Three supply chain attacks hit npm, PyPI, and Docker Hub between April 21–23, 2026. All three targeted secrets: API keys, cloud credentials, SSH keys, and tokens from developer environments and CI/CD ...
Bleeping Computer

PyPI mandates 2FA for critical projects, developer pushes back

On Friday, the Python Package Index (PyPI), the official repository of third-party open-source Python projects announced plans to mandate two-factor authentication requirement for maintainers of ...
Dark Reading

Threat Actor Phishing PyPI Users Identified

Security researchers have identified a previously unknown group dubbed "JuiceLedger" as the threat actor behind a recent and first-known phishing campaign specifically targeting users of the Python ...