#pypi — Public Fediverse posts

It's the first day back to school!! 🎒📖🪀🐛

2nd seasonal reminder to update your #Python packages 🚲🌻🍂🌳

• pip list --outdated
• python -m pip install --upgrade pip

📝🥞🍁 @pypi.org (https://pypi.org/project/pip/)

#PythonPackageIndex #PyPi

It's the first day back to school!! 🎒📖🪀🐛

2nd seasonal reminder to update your #Python packages 🚲🌻🍂🌳

• pip list --outdated
• python -m pip install --upgrade pip

📝🥞🍁 @pypi.org (https://pypi.org/project/pip/)

#PythonPackageIndex #PyPi

It's the first day back to school!! 🎒📖🪀🐛

2nd seasonal reminder to update your #Python packages 🚲🌻🍂🌳

• pip list --outdated
• python -m pip install --upgrade pip

📝🥞🍁 @pypi.org (https://pypi.org/project/pip/)

#PythonPackageIndex #PyPi

It's the first day back to school!! 🎒📖🪀🐛

2nd seasonal reminder to update your #Python packages 🚲🌻🍂🌳

• pip list --outdated
• python -m pip install --upgrade pip

📝🥞🍁 @pypi.org (https://pypi.org/project/pip/)

#PythonPackageIndex #PyPi

It's the first day back to school!! 🎒📖🪀🐛

2nd seasonal reminder to update your #Python packages 🚲🌻🍂🌳

• pip list --outdated
• python -m pip install --upgrade pip

📝🥞🍁 @pypi.org (https://pypi.org/project/pip/)

#PythonPackageIndex #PyPi

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI file hosting errors caused weeks of 502s. See how a Fastly CDN 502 error was traced to one cache node and fixed by August 28.

#PyPI #Fastly #CDN #Cybersecurity #DevOps #Python #InfraSecurity #CloudSecurity

https://securityonline.info/pypi-file-hosting-errors/?utm_source=mastodon&utm_medium=jetpack_social

PyPI Blog: Incident File Hosting Errors

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

Comments: https://news.ycombinator.com/item?id=49610925

#HackerNews #PyPI #Blog #Incident #FileHosting #Errors #PythonProgramming #SoftwareDevelopment #Cybersecurity #OpenSource

PyPI Blog: Incident File Hosting Errors

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

Comments: https://news.ycombinator.com/item?id=49610925

#HackerNews #PyPI #Blog #Incident #FileHosting #Errors #PythonProgramming #SoftwareDevelopment #Cybersecurity #OpenSource

PyPI Blog: Incident File Hosting Errors

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

Comments: https://news.ycombinator.com/item?id=49610925

#HackerNews #PyPI #Blog #Incident #FileHosting #Errors #PythonProgramming #SoftwareDevelopment #Cybersecurity #OpenSource

PyPI Blog: Incident File Hosting Errors

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

Comments: https://news.ycombinator.com/item?id=49610925

#HackerNews #PyPI #Blog #Incident #FileHosting #Errors #PythonProgramming #SoftwareDevelopment #Cybersecurity #OpenSource

PyPI Blog: Incident File Hosting Errors

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

Comments: https://news.ycombinator.com/item?id=49610925

#HackerNews #PyPI #Blog #Incident #FileHosting #Errors #PythonProgramming #SoftwareDevelopment #Cybersecurity #OpenSource

I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

I wrote up a #PyPI incident report for some install-time issues experienced a few of weeks ago by some users, and what was changed.

https://blog.pypi.org/posts/2026-09-08-file-hosting-errors/

Восемь аниме-плееров рунета изнутри: шифр Цезаря, пустой параметр и домен, который увели

Я взял за основу популярную опенсорсную библиотеку парсеров аниме-плееров, запустил её — и получил от Kodik 500 Internal Server Error . Не «токен протух», не «IP заблокирован», а именно 500 на каждый запрос. Разбор занял вечер, а причина оказалась в одном символе: библиотека отправляла параметр ref пустым, а сервер требует его заполненным и раскодированным . Дальше выяснилось, что это не единичная поломка, а норма жанра. Один плеер полгода назад переехал на другой формат страницы. Другой отвечает бесконечным редиректом на самого себя. У третьего домен просто увели — сейчас там индонезийский интернет-магазин, а не аниме. Четвёртый прячет ссылки в WebSocket из обфусцированного бандла на 600 КБ, и его я честно не осилил. Под катом — разбор восьми плееров: как каждый отдаёт видео, где именно ломаются существующие парсеры и что из этого следует, если вы пишете что-то похожее. Библиотека получилась побочным продуктом и лежит в открытом доступе.

https://habr.com/ru/articles/1079156/

#python #парсинг #реверсинжиниринг #hls #m3u8 #аниме #pypi #github_actions #websocket

🕵🏻‍♂️ [InfoSec MASHUP] 21/2026 - The Supply Chain Didn't Break. It Was Walked.

This week's issue reads like a case study in cascade failure. A malicious VS Code extension on one #GitHub employee's device leads to 3,800 internal repositories exfiltrated — by #TeamPCP, the same group that poisoned 170 npm and #PyPI packages last week. #Grafana gets breached via a token nobody rotated after the TanStack attack, itself a TeamPCP operation. A GitHub Action used by thousands of projects gets compromised and starts exfiltrating CI/CD credentials. And somewhere in a public GitHub spreadsheet, CISA contractor credentials — including #AWS GovCloud keys — sat waiting to be found.

These aren't four separate incidents. They're one incident with four manifestations. The supply chain isn't a vector anymore; it's the terrain. Developer tooling, CI/CD pipelines, third-party actions, tokens issued and forgotten — all of it is now actively mapped and exploited with a persistence that makes the traditional "patch and move on" response look quaint. The Verizon DBIR dropped this week noting that third-party compromise is surging. The week's news was already illustrating the point before the report landed.

→ Week #21/2026 also covers: fast16 predated #Stuxnet and corrupted nuclear simulations quietly, #Pwn2Own Berlin paid $1.3M for 47 bugs, and #Bluesky got hijacked for Russian propaganda.

Full issue 👉 https://infosec-mashup.santolaria.net/p/infosec-mashup-21-2026-the-supply-chain-didn-t-break-it-was-walked

If you find it useful, subscribe to get it in your inbox every weekend 📨 #infosecMASHUP #cybersecurity #infosec #threatintel #AI

#TreeTime #Trees #MindMap #Editor #OpenSource #FreeSoftware

In reaction to several turns of recent events, TreeTime is starting to move away from #GitHub to #Codeberg: https://codeberg.org/jkanev/treetime#readme

There will be a transition period in which both repositories will receive updates in parallel.

The installable packages in #Pypi, the webpage on https://tree-time.info, and the documentation in #readthedocs will stay unaffected.