Pypi - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

viraj-sh

Oct 24

Develop and Publish Python Packages to PyPI

#python #pypi

3 min read

Hacks.gr

Oct 24

Hacker breached LiteLLM and uploaded malicious software update

#litellm #supplychain #python #pypi

2 min read

Oct 24

Malicious LiteLLM v1.107.0 on PyPI/Docker Hub Executes Arbitrary Code on Python Start: Mitigation Steps Available

#security #malware #python #pypi

6 min read

Iain

Oct 23

New Python packages picked hatchling, not uv_build

#ai #python #pypi #uv

5 min read

yutianle

Oct 23

The .pth file that runs before your code: lessons from the LiteLLM 1.107.0 compromise

#supplychain #litellm #pypi #pthfile

5 min read

Garrin Costa, Jr.

Oct 22

5 checks before you publish to PyPI: a pre-release guide for Python packages

#python #pypi #opensource #devops

3 min read

Oct 22

PyPI's litellm 1.107.0 Compromised: Malicious Code Steals Data, Executes Commands; Update Urgently.

#security #malware #python #pypi

7 min read

RC

Oct 22

A malicious LiteLLM release stole credentials on install

#supplychain #pypi #litellm

4 min read

Hacks.gr

Oct 22

Security breach in LiteLLM library with data theft

#litellm #python #docker #pypi

2 min read

EME GUG

Oct 21

Your pip install Just Ran Someone Else's Code: A Practical Defense Guide Against PyPI Supply Chain Attacks

#python #security #pypi #supplychain

8 min read

Hacks.gr

Oct 21

Popular LiteLLM library hacked, version with hidden malware released

#litellm #python #github #pypi

2 min read

yutianle

Oct 14

Typosquatting and Slopsquatting: Defending the Package Install Path

#supplychain #npm #pypi #cicd

4 min read

Wen Ping

Oct 13

How to use a private PyPI index: from install to twine upload and pip install

#pypi #twine #private #angusrepo

4 min read

hao li

Oct 11

readmeta v0.2: --fix rewrites your broken PyPI README links at build time

#python #pypi #packaging #opensource

2 min read

yutianle

Oct 11

MemTensor: When an AI Memory Plugin Becomes the Credential Collector

#supplychain #npm #pypi #aiagents

2 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.