SecurityWeek

New GitHub, PyPI Policies Boost Supply Chain Security

GitHub’s Dependabot waits three days before opening pull requests, and PyPI rejects file uploads to releases older than 14 ...

GitHub, PyPI add time-based defenses against supply chain attacks

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to ...
Techzine Europe

GitHub and PyPI are delaying updates to reduce attackers’ opportunities

GitHub and PyPI are implementing new measures to better protect software developers against attacks via the software supply ...
Bleeping Computer

PyPI urges users to reset credentials after new phishing attacks

The Python Software Foundation has warned victims of a new wave of phishing attacks using a fake Python Package Index (PyPI) website to reset credentials. Accessible at pypi.org, PyPI is the default ...
Techzine

GitHub en PyPI vertragen updates om aanvallers minder kans te geven

GitHub en PyPI voeren nieuwe maatregelen in om softwareontwikkelaars beter te beschermen tegen aanvallen via de software ...
it-daily.net

GitHub und PyPI führen zeitbasierte Schutzmechanismen ein

GitHub und PyPI führen zeitverzögerte Schutzmechanismen ein, um Entwicklungsumgebungen vor manipulierten Software-Paketen zu ...

GitHub et PyPI renforcent leur sécurité face aux attaques de la supply chain

Trois jours d'attente chez GitHub, deux semaines de verrou chez PyPI : les plateformes qui distribuent le code du monde ...
ZDNet

Python programming: PyPl is rolling out 2FA for critical projects, giving away 4,000 security keys

PyPI or the Python Package Index is giving away 4,000 Google Titan security keys as part of its move to mandatory two-factor authentication (2FA) for critical projects built in the Python programming ...
ZDNet

Developers, watch your code: Official Python repository spread malicious projects

PyPI is the official Python Package Index that currently contains 500,972 projects, 5,228,535 million releases, 9,950,103 million files, and 770,841 users. PyPI helps users locate and install software ...