GoKawiil - Tech News

1.

New GitHub, PyPI Policies Hope to Boost Supply Chain Security (slashdot.org)

2026-08-01 | by Posted | tags: github, pypi, dependabot

2.

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests (bleepingcomputer.com)

2026-07-30 | tags: anthropic, claude, pypi

3.

GitHub, PyPI add time-based defenses against supply chain attacks (bleepingcomputer.com)

2026-07-26 | tags: github, pypi, dependabot

4.

GitHub, PyPI add time-absed defenses against supply chain attacks (bleepingcomputer.com)

2026-07-26 | tags: github, pypi, dependabot

5.

PyPI Blog: Releases now reject new files after 14 days (news.ycombinator.com)

2026-07-22 | tags: pypi, python, peps

6.

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials (bleepingcomputer.com)

2026-07-08 | tags: npm paysafe, packages, paysafe

7.

New ChocoPoC malware targets researchers via trojanized PoC exploits (bleepingcomputer.com)

2026-07-01 | get Cybersecurity Research Kit → | tags: chocopoc, github, pypi

8.

Malicious PyPI packages give hackers control of Telegram bot servers (bleepingcomputer.com)

2026-06-30 | get PyPI Security Scanner → | tags: pyrogram, telegram, pypi

9.

'Hades' Campaign Against PyPI Puts New Spin on Shai-Hulud (darkreading.com)

2026-06-08 | by Elizabeth Montalbano | get Python Package Security Kit → | tags: attacks, hulud, post

10.

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard (zdnet.com)

2026-05-28 | by Steven Vaughan-Nichols | get Bumblebee Dev Scanner → | tags: perplexity, bumblebee, chainguard

11.

OpenAI confirms security breach in TanStack supply chain attack (bleepingcomputer.com)

2026-05-14 | get TanStack Query Book → | tags: openai, tanstack, npm

12.

Wrap Go binaries in Python wheels (news.ycombinator.com)

2026-05-12 | get PyInstaller for Python packaging → | tags: go-to-wheel, python wheels, go binary

13.

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages (bleepingcomputer.com)

2026-05-12 | get TanStack Query Book → | tags: shai hulud, tanstack, mistral

14.

PySimpleGUI 6 (news.ycombinator.com)

2026-05-05 | get PySimpleGUI Cookbook → | tags: pysimplegui, pypi, github

15.

PyPI package with 1.1M monthly downloads hacked to push infostealer (bleepingcomputer.com)

2026-04-27 | get Cybersecurity Software Suite → | tags: pypi, elementary-data, github actions

16.

PyPI package telnyx has been compromised in yet another supply chain attack (news.ycombinator.com)

2026-03-27 | by Start Today | get Telnyx API SDK → | tags: pypi, telnyx, supply chain

17.

Popular LiteLLM PyPI Package Backdoored To Steal Credentials, Auth Tokens (slashdot.org)

2026-03-27 | get Secure Python Coding Book → | tags: litellm, pypi, teampcp

18.

Backdoored Telnyx PyPI package pushes malware hidden in WAV audio (bleepingcomputer.com)

2026-03-27 | get Secure Python Package Scanner → | tags: telnyx, pypi, teampcp

19.

Telnyx package compromised on PyPI (news.ycombinator.com)

2026-03-27 | get PyPI Security Audit Tool → | tags: telnyx, pypi, python sdk

20.

My minute-by-minute response to the LiteLLM malware attack (news.ycombinator.com)

2026-03-26 | get LiteLLM Malware Response Kit → | tags: litellm, pypi, malware

21.

Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens (bleepingcomputer.com)

2026-03-24 | tags: litellm, pypi, teampcp

22.

Popular LiteLLM PyPI package compromised in TeamPCP supply chain attack (bleepingcomputer.com)

2026-03-24 | get LiteLLM Development Kit → | tags: litellm, pypi, teampcp

23.

Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised (news.ycombinator.com)

2026-03-24 | get Python Package Security Kit → | tags: litellm, pypi, credential stealer

24.

Pyodide: a Python distribution based on WebAssembly (news.ycombinator.com)

2026-03-13 | get Pyodide WebAssembly Package → | tags: pyodide, cpython, webassembly

25.

Okmain: How to pick an OK main colour of an image (news.ycombinator.com)

2026-03-09 | get Color Palette Generator Tool → | tags: oklab, colour clustering, k-means

26.

PyPI in 2025: A Year in Review (news.ycombinator.com)

2025-12-31 | get Python Package Index → | tags: organizations, publishing, pypi

27.

Blog: PyPI in 2025: A Year in Review (news.ycombinator.com)

2025-12-31 | get Python Package Index → | tags: organizations, publishing, pypi

28.

Python Foundation Donations Surge After Rejecting Grant - But Sponsorships Still Needed (slashdot.org)

2025-11-09 | by Posted | get Open Source → | tags: community, pycon, pypi

29.

PyPI urges users to reset credentials after new phishing attacks (bleepingcomputer.com)

2025-10-31 | get Meta Quest → | tags: credentials, org, phishing

30.

PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows (news.ycombinator.com)

2025-10-31 | get science reference book → | tags: actions, gitguardian, github