#PyPi Etiketinde En Popüler Paylaşımlar
Update: The core framework is now officially live on PyPI. You can pull it directly into your environment via pip install ul-smf. Full telemetry and documentation are in the GitHub repo.
#PyPI @github #kvcache #VRAM @vllm_project
#PyPI runs on ~zero AWS cost thanks to @FastlyDevs caching 99% of traffic + @AWSOpen credits covering the rest. Huge thanks to both! But 2026 broke an 8-year streak: AWS spend is up 69% YoY as agents & CI runs surge.
Jacob Coffee, PSF Director of Engineering, on what's changing: https://t.co/1RyOwH1JCY
#Python
🚨 openssl_encrypt Mass Disclosure — 20+ CVEs, 12 at CVSS 9.8
CVE-2026-74894 (9.8): Auth bypass — any Bearer token accepted
CVE-2026-74895 (9.8): Sandbox RCE
→ https://t.co/hPa6cXTKRV
#cybersecurity #infosec #Python #PyPI #Cryptography #CVSS9 #ThreatIntel
The #Python Package Index now rejects new files published to releases older than 14 days. This mitigation prevents long-stable releases from being poisoned in case publishing tokens or workflows of #PyPI projects are compromised.
https://t.co/OGzvbcID7c
#security #supplychain
"PolinRider Jumps the Fence" published by OpenSourceMalware. #SupplyChain, #NPM, #PyPI, #VSCode, #PolinRider https://t.co/AzJa9FvEED
PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux https://t.co/OaqLINE4m9 #Malware #Cybersecurity #PyPI #ZiChatBot #LinuxSecurity
🎉 Cheers and huge thanks to @Meta_Engineers for 10 years running as a PSF sponsor! Their support has helped fund #PyPI security work, the Developer in Residence program, and community events like #PyConUS.
If #Python powers your organization, consider giving back by sponsoring the PSF 💛💙
https://t.co/nvGeGxDKfq
This year marks Meta’s 10th consecutive year as a sponsor of @ThePSF!
Python remains the most used programming language across our engineering stack, powering the backends of Instagram and Threads alongside our AI research infrastructure.
By supporting the PSF, we aim to help ensure that Python remains robust, innovative and accessible for generations of engineers to come.
Read our full reflection on our long-term commitment to Python: https://t.co/4GxLbkQCI4
#Python: Attackers Planted a #Telegram-Powered Backdoor #Malware Across Fake 'pyrogram' Packages on #PyPI:
* pyrogram-navy
* pyrogram-styled
* sepgram
* pyrogram-kelra
...and others - check out the @CheckmarxZero blog post for more details:
👇
https://t.co/p7LB5UJQvT
Hear from PSF's @pypi Support Specialist Maria Ashna on what her day-to-day looks like, how she cleared multiple months-long backlogs, and the future of PyPI Orgs in this Behind the Commit episode from Mia Bajić.
▶️ https://t.co/HCFgyrAAzJ
#Python #PyPI #OpenSource
🚨 Our @JFrogSecurity Research team identified a new wave of #PyPI packages containing a variant of the Shai-Hulud worm, now with prompt injection to bypass AI scanning:
[email protected]
[email protected]
[email protected]
[email protected]
Our blog has been updated with the technical details: https://t.co/tjrPKnRmOd
Few month ago, I published my first PyPI package: pyquicktools
Built to eliminate repetitive Python boilerplate with utilities for retries, async workflows, debugging, and JSON handling.
Would love feedback from developers building real products.
#Python #OpenSource #PyPI
☠️ A crypto threat actor group has published 34 malicious packages and 384 versions across #npm, #PyPI, and https://t.co/83Ur9zSTrg, aimed at stealing crypto wallet credentials, AWS keys, GitHub tokens, and other sensitive secrets.
The campaign also includes PR submissions targeting open-source projects (so far, no malicious PRs have been merged). The attack vector primarily uses zero-width characters embedded in CLAUDE.md and .cursorrules files to manipulate AI Agents into executing malicious instructions.
If you are using any AI Agent that reads project configuration files, immediately perform the following checks:
1. Audit AI configuration files in the project: check whether unexpected files exist in the root directory such as .cursorrules, CLAUDE.md, or .github/copilot-instructions.md.
2. Use a hex editor or cat -A to inspect whether these files contain zero-width characters (which may appear as abnormal sequences such as M-bM-^@M-^K).
3. Pay attention to recently added AI configuration files—especially those not explicitly created by your team.
4.Investigate system persistence traces: check whether any unexpected hook scripts exist under the .git/hooks/ directory.
5. Review shell configuration files (.bashrc / .zshrc) for suspicious source commands or hidden execution logic.
6. Check for unauthorized scheduled tasks via crontab -l and systemctl list-units.
7. Look for local IOC (Indicators of Compromise), including:
ddjidd564[.]github[.]io
ddjidd564[.]github[.]io/defi-security-best-practices/
GitHub account: ddjidd564
P-2024-001
trap-core.js
trap-core.js size: 48485 bytes
XOR key: cargo-build-helper-2026
GitHub raw content webhook configuration fetch
More analysis, package details, IOCs, and GitHub-related activity here, including attacker-hosted payload/config infrastructure and PRs attempting to add .cursorrules / CLAUDE.md files to popular AI and developer projects:
https://t.co/vdDeRRS446
Another mini-#ShaiHulud worm attack last night impacted 639 versions of packages in #NPM '@ antv' ecosystem. The full Mini Shai-Hulud campaign now impacts 1000+ versions across 500+ unique packages. The campaign spans npm, #PyPI, and #Composer:
👇
https://t.co/lE9qlX40iE
Sotwe'de En Son Görülen Etiketler
omegle
zksyncEra
Son görüldüğü yer United States
Rockfordcityajithfansclub
Son görüldüğü yer United States
momson()**** + filter:native_video
Son görüldüğü yer United States
詳しくはyoutubeにて
Son görüldüğü yer Malaysia
hogeheideweg
Son görüldüğü yer United States
Momsonn (filter:videos)*
Tiftik
Son görüldüğü yer United States
tomaraquechova
Son görüldüğü yer United States
Asian
Son görüldüğü yer India
Senin İçin Trendler
En Popüler Kullanıcılar
Elon Musk 
@elonmusk
241.5M takipçi
Barack Obama
@barackobama
119.1M takipçi
Cristiano Ronaldo
@cristiano
113.5M takipçi
Donald J. Trump
@realdonaldtrump
111.8M takipçi
Narendra Modi
@narendramodi
107.2M takipçi
Rihanna
@rihanna
98.5M takipçi
NASA
@nasa
92.3M takipçi
Justin Bieber
@justinbieber
91.7M takipçi
KATY PERRY
@katyperry
89.5M takipçi
Taylor Swift
@taylorswift13
83.4M takipçi
Lady Gaga
@ladygaga
74.9M takipçi
Virat Kohli
@imvkohli
72.5M takipçi
Kim Kardashian
@kimkardashian
70.7M takipçi
YouTube
@youtube
68.8M takipçi
Neymar Jr
@neymarjr
65.5M takipçi
Bill Gates
@billgates
64.8M takipçi
Selena Gomez
@selenagomez
62.5M takipçi
The Ellen Show
@theellenshow
62.3M takipçi
CNN
@cnn
61.8M takipçi
X
@x
60.8M takipçi