News

InfoWorld1d
Software Development - InfoWorld
Malicious PyPI package targets Chimera users to steal AWS tokens, CI/CD secrets. By Shweta Sharma. Jun 17, 2025 1 min. Developer Malware Python. ... New Python projects to watch and try.
GitHub1d
GitHub - paylogic/py2deb: Python to Debian package converter
The Python package py2deb converts Python source distributions to Debian binary packages (the ones used for installation). It uses pip-accel (based on pip) to download, unpack and compile Python ...
The Hacker News22d
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks - The Hacker News
Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and ...
GitHub20d
GitHub - package-url/packageurl-python: Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase ...
packageurl.contrib.purl2url.get_repo_url(purl) returns a repository URL inferred from a Package URL. packageurl.contrib.purl2url.get_download_url(purl) returns a download URL inferred from a Package ...