Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: python Clear Filter

PyPI invalidates tokens stolen in GhostAction supply chain attack

The Python Software Foundation team has invalidated all PyPI tokens stolen in the GhostAction supply chain attack in early September, confirming that the threat actors didn't abuse them to publish malware. These tokens are used to publish packages on the Python Package Index (PyPI), a software repository that acts as the default source for Python's package management tools and hosts hundreds of thousands of packages. As PyPI admin Mike Fiedler explained, a GitGuardian employee reported on Sept

Microsoft Python Driver for SQL Server

Microsoft Python Driver for SQL Server mssql-python is a Python driver for Microsoft SQL Server and the Azure SQL family of databases. It leverages Direct Database Connectivity (DDBC) that enables direct connections to SQL Server without requiring an external driver manager. Designed to comply with the DB API 2.0 specification, this driver also introduces Pythonic enhancements for improved usability and functionality. It supports a full range of database operations, including connection managem

Show HN: Pyproc – Call Python from Go Without CGO or Microservices

pyproc Run Python like a local function from Go — no CGO, no microservices. 🎯 Purpose & Problem Solved The Challenge Go excels at building high-performance web services, but sometimes you need Python: Machine Learning Models : Your models are trained in PyTorch/TensorFlow : Your models are trained in PyTorch/TensorFlow Data Science Libraries : You need pandas, numpy, scikit-learn : You need pandas, numpy, scikit-learn Legacy Code : Existing Python code that's too costly to rewrite : Exis

PythonBPF – Writing eBPF Programs in Pure Python

Introduction Python-BPF offers a new way to write eBPF programs entirely in Python, compiling them into real object files. This project is open-source and available on GitHub and PyPI. I wrote it alongside R41k0u. Published Library with Future Plans Python-BPF is a published Python library with plans for further development towards production-ready use. You can pip install pythonbpf but it’s certainly not at all production ready and the code is hacky at best with more bugs than I could count

CorentinJ: Real-Time Voice Cloning (2021)

Real-Time Voice Cloning This repository is an implementation of Transfer Learning from Speaker Verification to Multispeaker Text-To-Speech Synthesis (SV2TTS) with a vocoder that works in real-time. This was my master's thesis. SV2TTS is a deep learning framework in three stages. In the first stage, one creates a digital representation of a voice from a few seconds of audio. In the second and third stages, this representation is used as reference to generate speech given arbitrary text. Video

The "impossibly small" Microdot web framework

The "impossibly small" Microdot web framework Benefits for LWN subscribers The primary benefit from subscribing to LWN is helping to keep us publishing, but, beyond that, subscribers get immediate access to all site content and access to a number of extra site features. Please sign up today! The Microdot web framework is quite small, as its name would imply; it supports both standard CPython and MicroPython, so it can be used on systems ranging from internet-of-things (IoT) devices all the way

Python has had async for 10 years – why isn't it more popular?

The Python Documentary dropped this morning. In the middle of the documentary, there’s a dramatic segment about how the transition from Python 2 to 3 divided the community (spoiler alert: it didn’t in the end). The early versions of Python 3 (3.0-3.4) were mostly focused on stability and offering pathways for users moving from 2.7. Along came 3.5 in 2015 with a new feature: async and await keywords for executing coroutines. Ten years and nine releases later, Python 3.14 is weeks away. Whilst

Anatomy of a Python Loop

Learn Python loops the fun way by rolling dice, casting fireballs, and finally understanding what continue really does. Last time, when we built our little dice-rolling function, we learned how to package up logic into reusable blocks. One die roll at a time was cool… but any tabletop nerd knows the real action starts when you need to roll lots of dice. 3d6 for ability scores. 8d6 for a fireball spell. Or the cruel 10d10 your DM makes you roll when things go really sideways. So how do we te

SpaCy: Industrial-Strength Natural Language Processing (NLP) in Python

spaCy: Industrial-strength NLP spaCy is a library for advanced Natural Language Processing in Python and Cython. It's built on the very latest research, and was designed from day one to be used in real products. spaCy comes with pretrained pipelines and currently supports tokenization and training for 70+ languages. It features state-of-the-art speed and neural network models for tagging, parsing, named entity recognition, text classification and more, multi-task learning with pretrained trans

Do I not like Ruby anymore? (2024)

Do I not like Ruby anymore? 2024/05/28 I recently started working at a Python shop. The reasons behind this choice of employment are very much unrelated to the technology stack. Python is not my favorite programming language. In fact, allow me to drop the euphemism and express my pure, unadulterated thoughts about it: I never liked Python, I see it as a huge red flag and I think the world would be a better place if we all decided to finally move on from it. With that out of the way, let’s talk

Dynamically patch a Python function's source code at runtime

written by Eric J. Ma on | tags: In this blog post, I share how I discovered a powerful Python trick: dynamically changing a function's source code at runtime using the compile and exec functions. This technique enabled me to build more flexible AI bots, like ToolBot, that can generate and execute code with access to the current environment. While this opens up exciting possibilities for LLM-powered agents and generative UIs, it also raises serious security concerns. Curious how this hack can s

Static sites with Python, uv, Caddy, and Docker

Static Sites with Python, uv, Caddy, and Docker My preferred deployment stack for Python-built static sites. I’ve largely switched to uv at this point and it’s been pretty great. I use it for everything I can, from little scripts with uv run , to libraries, to applications. It’s so fast it does actually matter, the workflow side of things works well enough for me, and—perhaps most valuably—it manages Python executables for me beautifully. As we’re all familiar with by now, I’m a static site a

Code formatting comes to uv experimentally

August 21, 2025 The latest uv release (0.8.13) quietly introduced an experimental new command that Python developers have been waiting for: uv format . This addition brings code formatting directly into uv’s toolkit, eliminating the need to juggle multiple tools for basic Python development workflows. What is uv format? The uv format command provides Python code formatting through uv’s interface. Under the hood, it calls Ruff’s formatter to automatically style your code according to consisten

Uv format: Code Formatting Comes to uv (experimentally)

August 21, 2025 The latest uv release (0.8.13) quietly introduced an experimental new command that Python developers have been waiting for: uv format . This addition brings code formatting directly into uv’s toolkit, eliminating the need to juggle multiple tools for basic Python development workflows. What is uv format? The uv format command provides Python code formatting through uv’s interface. Under the hood, it calls Ruff’s formatter to automatically style your code according to consisten

An Update on Pytype

An update on pytype TL;DR: The last supported Python version for Pytype will be 3.12. We are still very actively interested in the space of Python type checking, but shifting our investments towards new ideas and different frameworks. Pytype's development began in 2012 to meet Google developers' demand for compile-time checking. Pytype started with using type inference and interface files, and then switched to inline annotations (while retaining the inference engine) after the acceptance of PE

Positron, a New Data Science IDE

We are excited to introduce Positron, a free, next-generation Integrated Development Environment (IDE) for data science by Posit PBC. Positron brings the spectrum of exploration and production work together in one environment so you can move from ideation to insight to application without switching context. Ultimately, we have taken all the learnings from the 14+ years of building RStudio, and applied them to a new platform that treats Python and R as equals. It is a great time to start using P

Show HN: MCP Security Suite

MCP Security Suite 🛡️ Unified security framework for Model Context Protocol (MCP) servers 📖 Quick Start Guide - Get up and running in 3 minutes! ⚠️ Important Note for Scanning This Project: This repository contains intentionally malicious test files in mcp_test_cases/ and tests/ directories to validate our detection capabilities. When scanning this project: To exclude test files : python3 mighty_mcp.py check . --profile production : To force fresh scan (bypass cache) : python3 mighty_mcp.py

PYX: The next step in Python packaging

A Python-native package registry from the creators of uv. Fast Speed up installs from PyPI, PyTorch, and your own private sources with optimized artifacts and uv-native metadata APIs. An order of magnitude faster than other private registries. Secure Create dedicated index URLs to filter packages by popularity, age, vulnerabilities, and more. Encode your own compliance rules and ensure reproducible builds on the server. Modern A singular focus on Python means best-in-class support for cutting

Preventing ZIP parser confusion attacks on Python package installers

Preventing ZIP parser confusion attacks on Python package installers The Python Package Index is introducing new restrictions to protect Python package installers and inspectors from confusion attacks arising from ZIP parser implementations. This has been done in response to the discovery that the popular installer uv has a different extraction behavior to many Python-based installers that use the ZIP parser implementation provided by the zipfile standard library module. Summary ZIP archives

Foundry (YC F24) is hiring staff-level product engineers

About Foundry We're building the foundational infrastructure to automate digital work. Today's browser-based workflows represent a potential trillion dollar opportunity—currently trapped behind inefficient manual tasks and repetitive actions. Current AI agents fail when facing complex real-world scenarios; they're brittle experiments, not scalable solutions. Foundry provides the critical, high-fidelity simulation environment necessary for training, testing, and deploying robust AI agents. Thin

Foundry (YC F24) Is Hiring Staff Level Product Engineers

About Foundry We're building the foundational infrastructure to automate digital work. Today's browser-based workflows represent a potential trillion dollar opportunity—currently trapped behind inefficient manual tasks and repetitive actions. Current AI agents fail when facing complex real-world scenarios; they're brittle experiments, not scalable solutions. Foundry provides the critical, high-fidelity simulation environment necessary for training, testing, and deploying robust AI agents. Thin

PyPI: Preventing ZIP parser confusion attacks on Python package installers

Preventing ZIP parser confusion attacks on Python package installers The Python Package Index is introducing new restrictions to protect Python package installers and inspectors from confusion attacks arising from ZIP parser implementations. This has been done in response to the discovery that the popular installer uv has a different extraction behavior to many Python-based installers that use the ZIP parser implementation provided by the zipfile standard library module. Summary ZIP archives

Python performance myths and fairy tales

Python performance myths and fairy tales [LWN subscriber-only content] Antonio Cuni, who is a longtime Python performance engineer and PyPy developer, gave a presentation at EuroPython 2025 about "Myths and fairy tales around Python performance" on the first day of the conference in Prague. As might be guessed from the title, he thinks that much of the conventional wisdom about Python performance is misleading at best. With lots of examples, he showed where the real problems that he sees lie. H

The Amaranth hardware description language

The Amaranth project provides an open-source toolchain for developing hardware based on synchronous digital logic using the Python programming language. It aims to be easy to learn and use, reduce or eliminate common coding mistakes, and simplify the design of complex hardware with reusable components. The Amaranth toolchain consists of the Amaranth language, the standard library, the simulator, and the build system, covering all steps of a typical FPGA development workflow. At the same time, i

ScreenCoder: An intelligent UI-to-code generation system

ScreenCoder: Advancing Visual-to-Code Generation for Front-End Automation via Modular Multimodal Agents Yilei Jiang1*, Yaozhi Zheng1*, Yuxuan Wan2*, Jiaming Han1, Qunzhong Wang1, Michael R. Lyu2, Xiangyu Yue1✉ 1CUHK MMLab, 2CUHK ARISE Lab *Equal contribution ✉Corresponding author Introduction ScreenCoder is an intelligent UI-to-code generation system that transforms any screenshot or design mockup into clean, production-ready HTML/CSS code. Built with a modular multi-agent architecture

Typed languages are better suited for vibecoding

This post has made it to the Hacker News front page, see the discussion there. My >10 year old programming habits have changed since Claude Code launched. Python is less likely to be my go-to language for new projects anymore. I am managing projects in languages I am not fluent in—TypeScript, Rust and Go—and seem to be doing pretty well. It seems that typed, compiled, etc. languages are better suited for vibecoding, because of the safety guarantees. This is unsurprising in hindsight, but it wa

How Python grew from a language to a community

When it first launched in 1991, Python “wasn’t lucrative,” remembers long-time Python community organizer Paul Everitt (now a Python and web developer advocate at JetBrains). “But we believed in it. The passion was there — we were doing good in the world.” Yet surprisingly, Python traveled a bumpy early road on its way to becoming the world’s #1 most popular programming language, safely ensconced in the nonprofit Python Software Foundation that would help it grow through the years. It’s a stor

Want a job in tech? You need these skills, McKinsey study shows

Nadzeya Haroshka / Getty Images ZDNET's key takeaways Python programming is the most sought-after skill for a range of tech initiatives. Demand for Amazon Web Services skills far outstrips available supply Prompt engineering falls flat as a sought-after skill In the age of artificial intelligence, certain skills are gold. However, for some emerging technology areas, there's a significant mismatch between available skills and needed skills. For example, while prompt engineers are considered

Benchmarking MicroPython

In the Q&A session following my EuroPython 2025 presentation about the Microdot web framework, a member of the audience asked me what the performance of MicroPython running on a microcontroller is. This took me a bit by surprise, because while I knew that microcontrollers are slow and underpowered devices, I really had no way to quantify this. I never questioned the supposedly low performance, because it was never a problem for me. My answer to the question was that microcontrollers cannot repl

Anaconda Raises $150M Series C

With Insight Partners-led Round, Anaconda Establishes Role as the Standardized Python Distribution for Mission-Critical AI Systems AUSTIN, TX – [July 31, 2025] – Anaconda, Inc., the company committed to advancing AI with open source at scale, today announced that it raised over $150M in a Series C funding round led by Insight Partners, with participation from Mubadala Capital. The company operates profitably with over $150M in annual recurring revenue (ARR) as of July 2025. This news comes on