PyPI

Evidence (10)

• 10Ars Technica AI·8/12/2026security
  Massive supply-chain attack exposes terabytes of credentials

  Security firms said a supply-chain compromise of LiteLLM exposed terabytes of credentials, including cloud keys, repository tokens, SSH keys, Kubernetes secrets, and AI provider keys. The exposed secrets may affect more than 2,500 organizations, including major companies such as Microsoft, Amazon, Cisco, Samsung, and Salesforce.

• 8GitHub Blog·8/6/2026security
  GitHub expands malware advisories beyond npm

  GitHub says Dependabot malware advisories now cover eight package ecosystems, including PyPI, by ingesting reports from OpenSSF’s malicious-packages repository. The update replaces a GitHub-only npm path with a shared importer that validates and normalizes OSV-format malware reports before they reach the advisory database.

• 7Hacker News·7/26/2026framework_update
  Ruff v0.16.0 expands default rules and adds new formatting features

  Ruff v0.16.0 is now available with a much larger default lint rule set, increasing enabled rules from 59 to 413. The release also adds Markdown code block formatting and new Ruff-specific suppression comments, while keeping breaking changes limited for most users.

• 6Simon Willison·7/23/2026security
  PyPI blocks uploads to old releases after 14 days

  PyPI now rejects new files uploaded to releases older than 14 days. The policy is intended to reduce supply-chain risk by preventing attackers from poisoning long-stable releases if publishing tokens or workflows are compromised.

• 3Simon Willison·7/14/2026framework_update
  Cache-friendly uvx use in GitHub Actions

  Simon Willison describes a cache-friendly pattern for running uvx in GitHub Actions by pinning resolution with a UV_EXCLUDE_NEWER date and including that date in the cache key. This lets workflows reuse downloaded Python tools and dependencies instead of repeatedly fetching fresh copies from PyPI, while still allowing controlled upgrades by changing the date.

• 5Simon Willison·7/2/2026product_launch
  llm-coding-agent 0.1a0 ships as an alpha coding agent

  Simon Willison released llm-coding-agent 0.1a0, a new Python coding agent built on the evolving llm agent framework. It can read and edit files, run commands, and expose a CLI and Python API for agentic coding workflows, with the package published to PyPI as a prerelease.

• 8The New Stack·7/1/2026security
  Codecov shows how CI pipelines can become the attack surface

  The article argues that the Codecov breach was not an isolated incident but an example of a broader pattern in which attackers target software build and deployment pipelines. It cites later supply-chain compromises such as XZ Utils and polyfill.io to show that CI/CD systems and other trusted delivery mechanisms can be used to exfiltrate secrets or deliver malware at scale.

• 7The New Stack·6/30/2026security
  Aikido buys Root to backport open source security fixes

  Aikido Security has acquired Root for $70 million and will fold its in-place vulnerability patching into a new product called Aikido Libraries. The company says it will also backport fixes for actively exploited vulnerabilities on CISA’s KEV list to open source projects for free across ecosystems including npm, PyPI, and Maven. The deal aims to reduce the gap between finding a vulnerability and fixing it without forcing immediate upgrades.

• 2Simon Willison·6/25/2026framework_update
  datasette-export-database 0.3a2 fixes dependency pin

  Simon Willison released datasette-export-database 0.3a2, a small update for exporting a copy of a mutable SQLite database on demand. The release fixes an accidental strict pin to datasette==1.0a27 by changing it to datasette>=1.0a27, restoring compatibility with other Datasette versions.

• 6Hugging Face Blog·6/23/2026framework_update
  Hugging Face automates weekly huggingface_hub releases with open tools and human review

  Hugging Face describes a new release workflow for huggingface_hub that moves routine release tasks into GitHub Actions while using an open-weights model to draft release notes and announcements. The process keeps a human in the loop for review and editing before publication, with the goal of making the setup reusable by other maintainers.