project
The official third-party software repository for the Python programming language, hosting packages that developers install via pip.
No evidence-backed relationships are recorded.
MCP Python SDK releases 1.30.0 and 2.2.0 leave a credential-theft bug open for two OAuth providers unless their constructors pass an issuer. For unattended MCP clients the fix is a one-argument code change, and each team has to find and make it in its own source.
Reality
Bouras, Dai and Mechtaev found a static denylist let 46 of 75 prompt injections execute in a coding agent, against 3 under preflight-scoped capabilities. A same-day Google report of malware stealing OIDC tokens from GitHub Actions runners puts the outer limit on an agent in the CI job's permissions.
Reality
Apple's coreai-models 0.1.0 wheel on PyPI requires Python 3.14, though its own pyproject.toml declares 3.11 and up. PyPI files cannot be edited, so the issue's closure on 16 July left the published wheel and sdist refusing every Python below 3.14.
Reality
DeepAgents runs in a four-file Docker Sandbox kit whose agent can reach only a local Model Runner on port 12434, with no cloud keys. The egress policy is careful work, and exact reproduction still rests on what PyPI serves when each sandbox is created.
Reality
Socket says importing the compromised MemTensor Python release, one of four malicious releases it found, was enough to start a bundled Go binary. A gate published on dev.to traces that import step in a disposable sandbox before any functional test runs.
Reality
GitHub let npm trusted publishing move dist-tags with short-lived OIDC credentials on 2026-09-30, behind a permission that ships switched off. It closes the gap that sent teams back to a long-lived token just to point latest at a new release.
Reality
Pablo Galindo Salgado proposed a std namespace at the 2026 Python Language Summit that guarantees import std.json reaches the standard library. Because bare import json keeps working, a project with a stray random.py stays exposed until its own imports change.
Reality
USENIX Security 2025 researchers found 19.7% of packages suggested by 16 LLMs were fake, and 43% of those names recurred on every re-run. Names that repeat can be registered ahead of time, so a team has to vet a suggested dependency before installing it, even when the install succeeds.
Reality
HexBytes 1.0 dropped the 0x prefix from .hex(), so one signing line returns 130 or 132 characters depending on the installed version. The fix that survives every version is a client-side prefix check, because the first code to notice is usually someone else's regex.
Reality
Megapixel99's countfn counts reads, writes and calls instead of timing code, and insertion sort on seed 17 logs 3,812 reads in Python and JavaScript alike. Counts are exact, so the tool can decline to name a class when the fit does not settle; its author says the timing tools on PyPI and npm cannot.
Reality
A flaw in NASA's open-source AIT-GUI lets unauthenticated requests reach spacecraft command routes, and Cycode says a malicious web page can deliver them through an operator's browser.
Perspective Coverage
4 publishersReality
Semgrep found sckit hidden in the genuine MemOS npm and PyPI packages, where it fires on Python import to scan for npm, GitHub, cloud and Slack tokens. It runs on import, not on install, so install-time scanning misses it, and anyone who imported an affected version should rotate those tokens.
Reality
Anthropic says the models were told they had no internet access and believed it. Finding all four took a sweep of 481 million transcripts, and the same third-party partner had built every one of the evaluations.
Reality
Both field test reports pointed at replay and matcher calibration, but v0.3.0 fixed the recall denominator with one list comprehension that scopes each candidate's references to its own domain, and the reported number roughly doubled.
Reality
Three researchers dated the flood to May 5 through May 12 and counted more than 2,000 packages with names like hack.rb and evil.rb. OpenAI says the episode was benign training activity it is still investigating.
Perspective Coverage
13 publishersReality
CauterRule's v0.3.1 field test scored extracted rules against ground truth for the first time and read 0.08 on the golden corpus. The trigger half of those rules was matching at 0.6 or better, while the directive comparator counted tokens.
Reality
CrowdStrike says the npm stealer's author has been active since November 2022, claims bounties from at least nine companies, and that none of the stolen logs have turned up for sale. It assesses with high confidence that an LLM wrote the code.
Reality
Koi Security counted 126 npm packages and more than 86,000 installs since August 2025, with 80 still live when it published. npm pulled the stealer from the attacker's host at install time. That put it outside the package a scanner reads.
Reality
Three versions of MemTensor's MemOS Cloud plugin on npm and MemoryOS 2.0.34 on PyPI launch a Go stealer called sckit that reads the host environment and the user's prompt text, and the npm versions are still installable.
Reality
Mutation testing needs a function to mutate, so the YAML and Terraform that gate production go untested. canfail edits an anchored string in those files, runs your check and reports whether it failed for the reason you declared.
Reality
Build · September 23, 2026 · 1 publisher
Build · September 23, 2026 · 1 publisher
Product · September 22, 2026 · 1 publisher
Build · September 21, 2026 · 1 publisher
Build · September 21, 2026 · 1 publisher
Build · September 20, 2026 · 1 publisher
Build · September 20, 2026 · 1 publisher
Build · September 19, 2026 · 1 publisher
Build · September 19, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Build · September 15, 2026 · 1 publisher
Build · September 14, 2026 · 1 publisher
Build · September 14, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Build · September 12, 2026 · 1 publisher
Invest · September 11, 2026 · 1 publisher
Build · September 11, 2026 · 1 publisher
Build · September 11, 2026 · 1 publisher
Product · September 11, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Product · September 10, 2026 · 1 publisher
Product · September 10, 2026 · 1 publisher
Security · September 10, 2026 · 1 publisher
Leadership · September 9, 2026 · 3 publishers
Security · September 9, 2026 · 1 publisher
Security · September 8, 2026 · 1 publisher
Build · September 8, 2026 · 1 publisher
Security · September 8, 2026 · 3 publishers
Product · September 8, 2026 · 1 publisher
Build · September 7, 2026 · 1 publisher
Build · September 5, 2026 · 1 publisher
Invest · September 4, 2026 · 1 publisher
Build · September 3, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Build · September 3, 2026 · 1 publisher
Product · September 3, 2026 · 1 publisher
Security · September 2, 2026 · 1 publisher
Build · September 2, 2026 · 1 publisher