电子工程专辑

【Python学习笔记】|PyPI使用国内源（pip更换国内源）

今天，我在学习及实践使用 Python 虚拟环境时，下载相应库文件，直接使用 pip 下载，结果因下载速度过于实在太慢导致始终 ...
新浪网

Python第三方库PyPI现恶意木马风险 开发者务必注意安装

据Checkmarx披露，Python第三方库PyPI存在安全风险。该平台存在名为BlazeStealer的恶意木马，黑客今年1月至10月在PyPI平台上发布了8 ...

Anthropic finds $1.5 million to help Python Foundation improve security

The Python Software Foundation (PSF) has an extra $1.5 million heading its way, after AI upstart Anthropic entered into a ...
ZDNet

Developers, watch your code: Official Python repository spread malicious projects

PyPI is the official Python Package Index that currently contains 500,972 projects, 5,228,535 million releases, 9,950,103 million files, and 770,841 users. PyPI helps users locate and install software ...
腾讯网

Anthropic向Python基金会投资150万美元：一场关于回馈与商业的讨论

Anthropic宣布与Python软件基金会达成为期两年的合作，投资150万美元支持Python生态系统安全建设。这笔资金将用于CPython和PyPI的关键安全升级，同时支撑基金会在Python语言、生态和全球社区方面的核心工作。
Bleeping Computer

PyPI urges users to reset credentials after new phishing attacks

The Python Software Foundation has warned victims of a new wave of phishing attacks using a fake Python Package Index (PyPI) website to reset credentials. Accessible at pypi.org, PyPI is the default ...
Dark Reading

One-Third of Popular PyPI Packages Mistakenly Flagged as Malicious

The scanners tasked with weeding out malicious contributions to packages distributed via the popular open source code repository Python Package Index (PyPI) create a significant number of false alerts ...

Anthropic 向 Python 软件基金会资助 150 万美元，重点关注 Python 生态安全

IT之家 1 月 14 日消息，Python 软件基金会 (PSF) 当地时间 13 日宣布该非营利组织与 AI“独角兽”Anthropic 达成了一份为期 2 年的合作协议，PSF 因此获得了 150 万美元（IT之家注：现汇率约合 1048.2 万元人民币）资助。 这笔资金将用于支持 PSF 的运营工作，重点关注 Python 编程语言生态系统的安全问题，如对 CPython 解释器实现、Py ...
Ars Technica

Actors behind PyPI supply chain attack have been active since late 2021

The official software repository for the Python language, Python Package Index (PyPI), has been targeted in a complex supply chain attack that appears to have successfully poisoned at least two ...