#pypi — Public Fediverse posts

quicktipp #117: Bootstrapping a portable Python bundle on MS Windows using the `pywinbundle` tool.

https://github.com/christian-korneck/pywinbundle

A bundle is a bit like a venv, but self-contained and can get moved/renamed to any path or copied to any Windows machine. The bundle will continue to work, even if there is no existing Python installation.

#python #windows #pip #venv #virtualenv #uv #jupyter #pypi

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://fed.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://web.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://web.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://fed.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

https://web.brid.gy/r/https://hackaday.com/2026/05/22/this-week-in-security-ai-generated-reports-more-ai-generated-reports-github-chaos-and-more-linux-vulnerabilities/

Il colloquio di lavoro come arma: Lazarus Group e la campagna Graphalgo contro gli sviluppatori crypto

https://insicurezzadigitale.com/il-colloquio-di-lavoro-come-arma-lazarus-group-e-la-campagna-graphalgo-contro-gli-sviluppatori-crypto/

[Перевод] Отчёт PSF об инциденте атаки на цепочку поставок LiteLLM/Telnyx + рекомендации

В этой статье рассмотрены две недавние атаки на цепочку поставок, направленные на пользователей популярных пакетов PyPI — litellm и telnyx. Также описаны рекомендации разработчикам и сопровождающим Python о том как подготовиться и защитить свои проекты.

https://habr.com/ru/articles/1019638/

#pypi #litellm #telnyx #security #атака_на_цепочку_поставок #best_practices #безопасность #python #trusted_publishers #trivy

The telnyx packages on PyPI have been compromised

https://lwn.net/Articles/1065059/

#HackerNews #telnyx #PyPI #compromise #security #cybersecurity #Python #packages

PyPI package telnyx has been compromised in yet another supply chain attack

https://www.aikido.dev/blog/telnyx-pypi-compromised-teampcp-canisterworm

#HackerNews #PyPI #telnyx #supplychainattack #cybersecurity #open-source #securitybreach

Today's security "Dear John" comes from VoIP provider Telnyx.

#telnyx #pypi #python #infosec #voip

Python Package Guru by Fabrizio Damicelli

https://pypkg.guru

search over #PyPI #python #packages
faster than on pypi.org and interactively

discover packages based on their capabilities (eg, try out "fast dataframe")

#neurodon #neuroscience #compsci #scipy

PSF Warns of Fake PyPI Login Site Stealing User Credentials https://hackread.com/psf-warn-fake-pypi-login-site-steal-credentials/ #Cybersecurity #PhishingScam #CyberAttack #Developers #Security #security #Software #Privacy #PyPI #Scam #PSF

#TreeTime #Trees #MindMap #Editor #OpenSource #FreeSoftware

In reaction to several turns of recent events, TreeTime is starting to move away from #GitHub to #Codeberg: https://codeberg.org/jkanev/treetime#readme

There will be a transition period in which both repositories will receive updates in parallel.

The installable packages in #Pypi, the webpage on https://tree-time.info, and the documentation in #readthedocs will stay unaffected.

I have just published shaclgen 3.0.0b1, please test: 💾 https://pypi.org/project/shaclgen/3.0.0b1/

There was no release of #shaclgen since almost 5 years. There were many changes in between including major #rdflib releases. A changelog can be retrieved from the commit history.

#python #pypi #shacl #SemanticWeb

One question about #PyPy #PyPi is how many functions like #xz will they NOT find at this point of minimal #Python library backdoors especially iF this is being used in the Enterprise #Fortune1000 and below as a vector IN, eh?

🐛🚪🚪🚪🚪🚪🚪🚪🚪🚪 🔍👀
☣️
👇
https://www.virustotal.com/graph/embed/ga60e68b3e1744e36b0e4b0cc98f17f1a19ec96449bb34313a0b3a4b3cf287cc3

#sensemapi is @nobodyinperson's #Python package for easy access to the 🗺️ #openSenseMap, an awesome measurement map we use in our #CO2 monitoring project to present and monitor some measurements:

https://opensensemap.org/explore/5d35d315953683001a2b877a

Here is the #sensemapi source code:

https://gitlab.com/tue-umphy/co2mofetten/software/python3-sensemapi

It is also available on #PyPI of course:

📦 https://pypi.org/project/sensemapi

#sensemapi is @nobodyinperson's #Python package for easy access to the 🗺️ #openSenseMap, an awesome measurement map we use in our #CO2 monitoring project to present and monitor some measurements:

https://opensensemap.org/explore/5d35d315953683001a2b877a

Here is the #sensemapi source code:

https://gitlab.com/tue-umphy/co2mofetten/software/python3-sensemapi

It is also available on #PyPI of course:

📦 https://pypi.org/project/sensemapi

#sensemapi is @nobodyinperson's #Python package for easy access to the 🗺️ #openSenseMap, an awesome measurement map we use in our #CO2 monitoring project to present and monitor some measurements:

https://opensensemap.org/explore/5d35d315953683001a2b877a

Here is the #sensemapi source code:

https://gitlab.com/tue-umphy/co2mofetten/software/python3-sensemapi

It is also available on #PyPI of course:

📦 https://pypi.org/project/sensemapi