Stories by miketheman

Anthropic Invests $1.5M in the Python Software Foundation and OSS Security

PyPI in 2025: A Year in Review

PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats

PyPI: Trusted Publishing Growth, Now for GitLab Self-Managed and Organizations

White Paper: Slippery Zips and Sticky Tar-Pits: Security and Archives

Open Infrastructure Is Not Free: PyPI, the PSF, and Sustainability

Datadog supports PyPI and the Python community through observability

PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows

PyPI: Preventing Domain Resurrection Attacks

PyPI now serves project status markers in API responses

Preventing ZIP parser confusion attacks on Python package installers

PyPI Phishing Attack: Incident Report

PyPI Users Email Phishing Attack

PyPI Prohibits inbox.ru email domain registrations

AWS Lambda standardizes billing for INIT Phase

PyPI Blog: Project Quarantine

PyPI now supports digital attestations

PyPI Safety and Security Engineer: First Year in Review

PyPI Blog: Malware Distribution and Domain Abuse

2FA Required for PyPI

1