techtarget

15-year-old Python vulnerability poses supply chain threat

A 15-year-old Python vulnerability remains unpatched on hundreds of thousands of open source repositories, causing concern for supply chain risks, according to new research by Trellix. Kasimir Schulz, ...
techtarget

How did the Python supply chain attack occur?

A security researcher reported a supply chain attack that involved an official software repository for the Python programming language. How did this supply chain attack work? There isn't a sysadmin or ...
irblog.prnewswire.com

Introducing Chainguard Libraries for Python: Malware-Resistant Dependencies Built Entirely from Source

Today, more than half of the world's developers rely on Python, a programming language that has become the foundation of modern AI and machine learning applications. As the popularity of Python has ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...