#pypi — Public Fediverse posts

It's the first day back to school!! 🎒📖🪀🐛

2nd seasonal reminder to update your #Python packages 🚲🌻🍂🌳

• pip list --outdated
• python -m pip install --upgrade pip

📝🥞🍁 @pypi.org (https://pypi.org/project/pip/)

#PythonPackageIndex #PyPi

It's the first day back to school!! 🎒📖🪀🐛

2nd seasonal reminder to update your #Python packages 🚲🌻🍂🌳

• pip list --outdated
• python -m pip install --upgrade pip

📝🥞🍁 @pypi.org (https://pypi.org/project/pip/)

#PythonPackageIndex #PyPi

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI Blog: Incident File Hosting Errors

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

Comments: https://news.ycombinator.com/item?id=49610925

#HackerNews #PyPI #Blog #Incident #FileHosting #Errors #PythonProgramming #SoftwareDevelopment #Cybersecurity #OpenSource

I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

WTF is https://pypi.org/project/backports.lzma-defi-corrected/ - seems to be a copy of my archived https://pypi.org/project/backports.lzma but why... made by https://pypi.org/user/moinonin/ who seems to have a bunch of possible typo-swatting packages all described as packages for predicting buy and sell signals going back years. Something fishy here! #PyPI #Python

WTF is https://pypi.org/project/backports.lzma-defi-corrected/ - seems to be a copy of my archived https://pypi.org/project/backports.lzma but why... made by https://pypi.org/user/moinonin/ who seems to have a bunch of possible typo-swatting packages all described as packages for predicting buy and sell signals going back years. Something fishy here! #PyPI #Python

WTF is https://pypi.org/project/backports.lzma-defi-corrected/ - seems to be a copy of my archived https://pypi.org/project/backports.lzma but why... made by https://pypi.org/user/moinonin/ who seems to have a bunch of possible typo-swatting packages all described as packages for predicting buy and sell signals going back years. Something fishy here! #PyPI #Python

WTF is https://pypi.org/project/backports.lzma-defi-corrected/ - seems to be a copy of my archived https://pypi.org/project/backports.lzma but why... made by https://pypi.org/user/moinonin/ who seems to have a bunch of possible typo-swatting packages all described as packages for predicting buy and sell signals going back years. Something fishy here! #PyPI #Python

WTF is https://pypi.org/project/backports.lzma-defi-corrected/ - seems to be a copy of my archived https://pypi.org/project/backports.lzma but why... made by https://pypi.org/user/moinonin/ who seems to have a bunch of possible typo-swatting packages all described as packages for predicting buy and sell signals going back years. Something fishy here! #PyPI #Python

@nedbat

Oh holy crap, I have to stop using #PyPI / #pip / #pipx now, too? 🤦‍♂️

Pyodide 314.0: Python packages can now publish WebAssembly wheels to PyPI

https://blog.pyodide.org/posts/314-release/

#HackerNews #Pyodide #WebAssembly #Python #PyPI #314.0 #development

PyPI Packages Poisoned in Hades Supply Chain Attack

Malicious actors have launched a supply-chain attack on the Python Package Index (PyPI), infecting 19 packages with 37 tainted versions that can download and execute a hidden JavaScript payload. This sneaky Hades campaign uses poisoned Python packages to spread its reach, putting developers and users at risk.

https://osintsights.com/pypi-packages-poisoned-in-hades-supply-chain-attack?utm_source=mastodon&utm_medium=social

#SupplyChain #Pypi #Hades #Python #EmergingThreats

Python Package Guru by Fabrizio Damicelli

https://pypkg.guru

search over #PyPI #python #packages
faster than on pypi.org and interactively

discover packages based on their capabilities (eg, try out "fast dataframe")

#neurodon #neuroscience #compsci #scipy

PSF Warns of Fake PyPI Login Site Stealing User Credentials https://hackread.com/psf-warn-fake-pypi-login-site-steal-credentials/ #Cybersecurity #PhishingScam #CyberAttack #Developers #Security #security #Software #Privacy #PyPI #Scam #PSF