mastodon.ie

Seth Larson🚨 Be aware there's a potential phishing campaign likely targeting <a href="https://mastodon.social/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> / <a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> package maintainers:<a href="https://discuss.python.org/t/phishing-attack/100267" rel="nofollow noopener" translate="no" target="_blank">https://discuss.python.org/t/phishing-attack/100267</a>

bignoseI just received a <a href="https://fosstodon.org/tags/Scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#Scam</a> email from a <a href="https://fosstodon.org/tags/TypoSquatter" class="mention hashtag" rel="nofollow noopener" target="_blank">#TypoSquatter</a>. Sender: noreply@pypj.orgThey're hoping I don't notice the typo for <a href="https://fosstodon.org/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> (the <a href="https://fosstodon.org/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> package index), and asking me to “follow this link to verify your email address”.Don't follow the link, just mark the message as spam and delete it.Be careful out there.

Snakemake Release RobotBeep, Beep - I am your friendly <a href="https://fediscience.org/tags/Snakemake" class="mention hashtag" rel="nofollow noopener" target="_blank">#Snakemake</a> release announcement bot.There is a new release of the Snakemake executor for <a href="https://fediscience.org/tags/SLURM" class="mention hashtag" rel="nofollow noopener" target="_blank">#SLURM</a> on <a href="https://fediscience.org/tags/HPC" class="mention hashtag" rel="nofollow noopener" target="_blank">#HPC</a> systems. Its version now is 1.6.0!Give us some time, and you will automatically find the plugin on <a href="https://fediscience.org/tags/Bioconda" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bioconda</a> and <a href="https://fediscience.org/tags/Pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pypi</a>.If you want to discuss the release, you will find the maintainers here on Mastodon! <a href="https://fediscience.org/@rupdecat" class="u-url mention" rel="nofollow noopener" target="_blank">@rupdecat</a> and <a href="https://fosstodon.org/@johanneskoester" class="u-url mention" rel="nofollow noopener" target="_blank">@johanneskoester</a>If you discover any issues, please report them on <a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/issues" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/issues</a>.See <a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/releases/tag/v1.6.0" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/releases/tag/v1.6.0</a> for details. Here is the header of the changelog:𝑅𝑒𝑙𝑒𝑎𝑠𝑒 𝑁𝑜𝑡𝑒𝑠 (𝑝𝑜𝑠𝑠𝑖𝑏𝑙𝑦 𝑎𝑏𝑏𝑟𝑖𝑔𝑒𝑑): 𝐅𝐞𝐚𝐭𝐮𝐫𝐞𝐬* added github action to label long pending issues as 'stale' (<a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/issues/239" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/issues/239</a>) ([6d7c50a](<a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/commit/6d7c50ae492c9557b6cc39119c572c5b5ef1b341" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/commit/6d7c50ae492c9557b6cc39119c572c5b5ef1b341</a>)) * treat sbatch errors as job errors instead of workflow errors (<a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/issues/322" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/issues/322</a>) ([5e38507](<a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/commit/5e3850762c73abf1fff8ba9e1e8c18379251041f" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/commit/5e3850762c73abf1fff8ba9e1e8c18379251041f</a>)) * using the current version of the announcement bot for Mastodon (<a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/issues/333" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/issues/333</a>) ([03e0e24](<a href="https://github.com/snakemake/snakemake-executor-plugin-slurm/commit/03e0e2426edbe2957be93f02f3ae3834f710faff" rel="nofollow noopener" translate="no" target="_blank">https://github.com/snakemake/snakemake-executor-plugin-slurm/commit/03e0e2426edbe2957be93f02f3ae3834f710faff</a>))𝐁𝐮𝐠 𝐅𝐢𝐱𝐞𝐬* allow unse...

Jason WeatherlyAfter some refactoring, learning about `hatch`, moving more files around, and generally abusing `test.pypi.org`: I've uploaded `diceparse` to PyPI. Still need to update the web documentation, but it now feels like a proper project at this point.I still need to add a CLI part so you can just roll dice after installing the package, but I'll handle that later. Also need to tweak the README.md a bit as well...<a href="https://social.linux.pizza/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a> <a href="https://social.linux.pizza/tags/diceparse" class="mention hashtag" rel="nofollow noopener" target="_blank">#diceparse</a> <a href="https://social.linux.pizza/tags/dice" class="mention hashtag" rel="nofollow noopener" target="_blank">#dice</a> <a href="https://social.linux.pizza/tags/ttrpg" class="mention hashtag" rel="nofollow noopener" target="_blank">#ttrpg</a> <a href="https://social.linux.pizza/tags/pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#pypi</a>

Erik-JanI was annoyed that there is no "expand_grid()" function in :python: <a href="https://fosstodon.org/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> as in :rstats: <a href="https://fosstodon.org/tags/RStats" class="mention hashtag" rel="nofollow noopener" target="_blank">#RStats</a> <a href="https://fosstodon.org/tags/tidyverse" class="mention hashtag" rel="nofollow noopener" target="_blank">#tidyverse</a> So I just published a small package on <a href="https://fosstodon.org/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> !Introducing polarsgrid <a href="https://pypi.org/project/polarsgrid/" rel="nofollow noopener" translate="no" target="_blank">https://pypi.org/project/polarsgrid/</a>Using the excellent <a href="https://fosstodon.org/tags/polars" class="mention hashtag" rel="nofollow noopener" target="_blank">#polars</a> 🐻‍❄️ package, easily create a table with product of factors: from polarsgrid import expand_grid expand_grid(a=[1, 2, 3], b=["x", "y"])Yields all combinations of its inputs as a <a href="https://fosstodon.org/tags/DataFrame" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataFrame</a>It can also produce a <a href="https://fosstodon.org/tags/LazyFrame" class="mention hashtag" rel="nofollow noopener" target="_blank">#LazyFrame</a> for streaming extra-big tables to disk

Patryk KrawaczyńskiZnajdowanie złośliwych pakietów PyPI ( <a href="https://nfsec.pl/security/6512" rel="nofollow noopener" translate="no" target="_blank">https://nfsec.pl/security/6512</a> ) <a href="https://infosec.exchange/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a> <a href="https://infosec.exchange/tags/pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#pypi</a> <a href="https://infosec.exchange/tags/twittermigration" class="mention hashtag" rel="nofollow noopener" target="_blank">#twittermigration</a> <a href="https://www.youtube.com/watch?v=3jf6xOg6e7Y" rel="nofollow noopener" translate="no" target="_blank">https://www.youtube.com/watch?v=3jf6xOg6e7Y</a>

Pyrzout :vm:Open source has a malware problem, and it’s getting worse <a href="https://www.helpnetsecurity.com/2025/07/10/open-source-malware-trends-2025/" rel="nofollow noopener" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/07/10/open-source-malware-trends-2025/</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> <a href="https://social.skynetcloud.site/tags/Don" class="mention hashtag" rel="nofollow noopener" target="_blank">#Don</a>'tmiss <a href="https://social.skynetcloud.site/tags/Sonatype" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sonatype</a> <a href="https://social.skynetcloud.site/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://social.skynetcloud.site/tags/report" class="mention hashtag" rel="nofollow noopener" target="_blank">#report</a> <a href="https://social.skynetcloud.site/tags/News" class="mention hashtag" rel="nofollow noopener" target="_blank">#News</a> <a href="https://social.skynetcloud.site/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a>

Wagtail10 underrated <a href="https://fosstodon.org/tags/Django" class="mention hashtag" rel="nofollow noopener" target="_blank">#Django</a> packages – comparing developers’ fav packages ⭐️ with their respective download counts <a href="https://wagtail.org/blog/10-underrated-django-packages/" rel="nofollow noopener" translate="no" target="_blank">https://wagtail.org/blog/10-underrated-django-packages/</a> <a href="https://fosstodon.org/tags/Django" class="mention hashtag" rel="nofollow noopener" target="_blank">#Django</a> <a href="https://fosstodon.org/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a>

⚯ Michel de Cryptadamus ⚯Just published version 1.16.6 of The Pdfalyzer, the surprisingly popular tool for analyzing (possibly malicious) PDFs I created after my own unpleasant encounter with such a creature. Includes a (kind of janky) <a href="https://universeodon.com/tags/YARA" class="mention hashtag" rel="nofollow noopener" target="_blank">#YARA</a> rule for <a href="https://universeodon.com/tags/GIFTEDCROOK" class="mention hashtag" rel="nofollow noopener" target="_blank">#GIFTEDCROOK</a> infostealer PDFs.* Github: <a href="https://github.com/michelcrypt4d4mus/pdfalyzer" rel="nofollow noopener" translate="no" target="_blank">https://github.com/michelcrypt4d4mus/pdfalyzer</a> * Pypi: <a href="https://pypi.org/project/pdfalyzer/" rel="nofollow noopener" translate="no" target="_blank">https://pypi.org/project/pdfalyzer/</a> * Homebrew: <a href="https://formulae.brew.sh/formula/pdfalyzer" rel="nofollow noopener" translate="no" target="_blank">https://formulae.brew.sh/formula/pdfalyzer</a><a href="https://universeodon.com/tags/pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#pypi</a> <a href="https://universeodon.com/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a> <a href="https://universeodon.com/tags/pdf" class="mention hashtag" rel="nofollow noopener" target="_blank">#pdf</a> <a href="https://universeodon.com/tags/pdfs" class="mention hashtag" rel="nofollow noopener" target="_blank">#pdfs</a> <a href="https://universeodon.com/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://universeodon.com/tags/Threatassessment" class="mention hashtag" rel="nofollow noopener" target="_blank">#Threatassessment</a> <a href="https://universeodon.com/tags/maldoc" class="mention hashtag" rel="nofollow noopener" target="_blank">#maldoc</a> <a href="https://universeodon.com/tags/malwareanalysis" class="mention hashtag" rel="nofollow noopener" target="_blank">#malwareanalysis</a> <a href="https://universeodon.com/tags/homebrew" class="mention hashtag" rel="nofollow noopener" target="_blank">#homebrew</a> <a href="https://universeodon.com/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://universeodon.com/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://universeodon.com/tags/yararule" class="mention hashtag" rel="nofollow noopener" target="_blank">#yararule</a>

Matthew Martin<a href="https://mastodon.social/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a> <a href="https://mastodon.social/tags/pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#pypi</a> the name apocalypse is coming - all the good names are taken

mgorny-nyan (on) :autism:🙀🚂🐧No i mamy kolejny powód, żeby nie używać <a href="https://pol.social/tags/PythonPoetry" class="mention hashtag" rel="nofollow noopener" target="_blank">#PythonPoetry</a>. Właśnie wynaleźli na nowo "reproducible build", i wyszło jak zwykle. Całkiem przeoczyli cały sens tego pomysłu, i zaczęli wymuszać znaczniki czasu na plikach w archiwach źródłowych. A do tego, jak SOURCE_DATE_EPOCH nie jest ustawione, to zamiast wyłączać tę funkcję, wymuszają znacznik zerowy.Tak więc wszystkie archiwa sdist tworzone przez Poetry i wrzucane na <a href="https://pol.social/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> dziś mają daty z roku 1970, co powoduje przypadkowe problemy. A najbardziej absurdalne w tym jest to, że ZIP nie obsługuje takich dat, więc kiedy tworzą archiwa binarne wheel, to nadpisuję tę datę inną przypadkową datą 🤦.<a href="https://github.com/python-poetry/poetry/issues/10083" rel="nofollow noopener" translate="no" target="_blank">https://github.com/python-poetry/poetry/issues/10083</a>

Frederik ElwertYou want to use a <a href="https://fedihum.org/tags/StaticSiteGenerator" class="mention hashtag" rel="nofollow noopener" target="_blank">#StaticSiteGenerator</a> and need to support <a href="https://fedihum.org/tags/multilingual" class="mention hashtag" rel="nofollow noopener" target="_blank">#multilingual</a> sites? It’s now easier than ever! For quite a while, <a href="https://fedihum.org/tags/Pelican" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pelican</a> had a great plugin for that use case. Now I helped migrate it to the new plugin format, which means that it can easily be installed from <a href="https://fedihum.org/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a>. <a href="https://github.com/pelican-plugins/i18n-subsites" rel="nofollow noopener" translate="no" target="_blank">https://github.com/pelican-plugins/i18n-subsites</a> <a href="https://fedihum.org/tags/MultilingualDH" class="mention hashtag" rel="nofollow noopener" target="_blank">#MultilingualDH</a> <a href="https://fedihum.org/tags/MinimalComputing" class="mention hashtag" rel="nofollow noopener" target="_blank">#MinimalComputing</a>

Pyrzout :vm:Backdoors in Python and NPM Packages Target Windows and Linux – Source:hackread.com <a href="https://ciso2ciso.com/backdoors-in-python-and-npm-packages-target-windows-and-linux-sourcehackread-com/" rel="nofollow noopener" translate="no" target="_blank">https://ciso2ciso.com/backdoors-in-python-and-npm-packages-target-windows-and-linux-sourcehackread-com/</a> <a href="https://social.skynetcloud.site/tags/1CyberSecurityNewsPost" class="mention hashtag" rel="nofollow noopener" target="_blank">#1CyberSecurityNewsPost</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/CyberAttack" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberAttack</a> <a href="https://social.skynetcloud.site/tags/SupplyChain" class="mention hashtag" rel="nofollow noopener" target="_blank">#SupplyChain</a> <a href="https://social.skynetcloud.site/tags/Hackread" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hackread</a> <a href="https://social.skynetcloud.site/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://social.skynetcloud.site/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://social.skynetcloud.site/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> <a href="https://social.skynetcloud.site/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> <a href="https://social.skynetcloud.site/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://social.skynetcloud.site/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> <a href="https://social.skynetcloud.site/tags/NPM" class="mention hashtag" rel="nofollow noopener" target="_blank">#NPM</a>

Pyrzout :vm:Backdoors in Python and NPM Packages Target Windows and Linux <a href="https://hackread.com/backdoors-python-npm-packages-windows-linux/" rel="nofollow noopener" translate="no" target="_blank">https://hackread.com/backdoors-python-npm-packages-windows-linux/</a> <a href="https://social.skynetcloud.site/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://social.skynetcloud.site/tags/CyberAttack" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberAttack</a> <a href="https://social.skynetcloud.site/tags/SupplyChain" class="mention hashtag" rel="nofollow noopener" target="_blank">#SupplyChain</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.skynetcloud.site/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> <a href="https://social.skynetcloud.site/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> <a href="https://social.skynetcloud.site/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://social.skynetcloud.site/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> <a href="https://social.skynetcloud.site/tags/NPM" class="mention hashtag" rel="nofollow noopener" target="_blank">#NPM</a>

Torbjørn Wikestad<a href="https://mastodon.xyz/@brunopostle" class="u-url mention" rel="nofollow noopener" target="_blank">@brunopostle</a> I don't know about the relevance of <a href="https://mastodon.world/tags/gbXML" class="mention hashtag" rel="nofollow noopener" target="_blank">#gbXML</a> , beside it being used by <a href="https://mastodon.world/tags/energyplus" class="mention hashtag" rel="nofollow noopener" target="_blank">#energyplus</a> / <a href="https://mastodon.world/tags/OpenStudio" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenStudio</a> . From the thesis of MGVisschers, I get the impression that the format is supposed by all building energy simulation software. And I've seen there is already a well developed gbxml package on <a href="https://mastodon.world/tags/pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#pypi</a> . To me, it seems obvious there should be a developed package for conversion between <a href="https://mastodon.world/tags/IFC" class="mention hashtag" rel="nofollow noopener" target="_blank">#IFC</a> and gbxml.

Torbjørn Wikestad<a href="https://mastodon.xyz/@brunopostle" class="u-url mention" rel="nofollow noopener" target="_blank">@brunopostle</a> I thought we could start a discussion here on the development of a Python package for IFC-to-gbXML-conversion, with the aim of making it available on PyPI and Conda. By having the discussion here, we might attract the interest of other contributors. You've already done great work on your fork of MSVisschers' original repo. For reference, I'll link to your repo here: <a href="https://github.com/brunopostle/IFC-to-gbXML-converter" rel="nofollow noopener" translate="no" target="_blank">https://github.com/brunopostle/IFC-to-gbXML-converter</a><a href="https://mastodon.world/tags/IFC" class="mention hashtag" rel="nofollow noopener" target="_blank">#IFC</a> <a href="https://mastodon.world/tags/Conda" class="mention hashtag" rel="nofollow noopener" target="_blank">#Conda</a> <a href="https://mastodon.world/tags/gbXML" class="mention hashtag" rel="nofollow noopener" target="_blank">#gbXML</a> <a href="https://mastodon.world/tags/pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#pypi</a> <a href="https://mastodon.world/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a>

Michael HankeThere is now a <a href="https://mas.to/tags/gitAnnex" class="mention hashtag" rel="nofollow noopener" target="_blank">#gitAnnex</a> package on <a href="https://mas.to/tags/PyPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPi</a>: <a href="https://pypi.org/project/git-annex/" rel="nofollow noopener" translate="no" target="_blank">https://pypi.org/project/git-annex/</a>This should make it simpler to deploy git-annex in Python virtual environments, also as versioned dependencies for software like <a href="https://mas.to/tags/Datalad" class="mention hashtag" rel="nofollow noopener" target="_blank">#Datalad</a> Packages are built for Linux, Windows, and Mac via GitHub actions: <a href="https://github.com/psychoinformatics-de/git-annex-wheel/" rel="nofollow noopener" translate="no" target="_blank">https://github.com/psychoinformatics-de/git-annex-wheel/</a>Contributions to cover more platforms are most welcome!

Pyrzout :vm:Malware Hidden in AI Models on PyPI Targets Alibaba AI Labs Users <a href="https://hackread.com/malware-ai-models-pypi-targets-alibaba-ai-labs-users/" rel="nofollow noopener" translate="no" target="_blank">https://hackread.com/malware-ai-models-pypi-targets-alibaba-ai-labs-users/</a> <a href="https://social.skynetcloud.site/tags/ArtificialIntelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArtificialIntelligence</a> <a href="https://social.skynetcloud.site/tags/MachineLearning" class="mention hashtag" rel="nofollow noopener" target="_blank">#MachineLearning</a> <a href="https://social.skynetcloud.site/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://social.skynetcloud.site/tags/CyberAttack" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberAttack</a> <a href="https://social.skynetcloud.site/tags/SupplyChain" class="mention hashtag" rel="nofollow noopener" target="_blank">#SupplyChain</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.skynetcloud.site/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> <a href="https://social.skynetcloud.site/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://social.skynetcloud.site/tags/ML" class="mention hashtag" rel="nofollow noopener" target="_blank">#ML</a>

Hackread.com🚨 Hackers are hiding malware inside AI/ML models on PyPI, targeting <a href="https://mstdn.social/tags/AlibabaAILabs" class="mention hashtag" rel="nofollow noopener" target="_blank">#AlibabaAILabs</a> users. Malicious packages dropped infostealers through infected Pickle files. Read: <a href="https://hackread.com/malware-ai-models-pypi-targets-alibaba-ai-labs-users/" rel="nofollow noopener" translate="no" target="_blank">https://hackread.com/malware-ai-models-pypi-targets-alibaba-ai-labs-users/</a><a href="https://mstdn.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mstdn.social/tags/Alibaba" class="mention hashtag" rel="nofollow noopener" target="_blank">#Alibaba</a> <a href="https://mstdn.social/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#PyPI</a> <a href="https://mstdn.social/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://mstdn.social/tags/CyberAttacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberAttacks</a> <a href="https://mstdn.social/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a>

Gleb EbertI enjoyed writing my first blog post last weekend, so I thought I'd write another one. This one is about a <a href="https://mstdn.science/tags/bash" class="mention hashtag" rel="nofollow noopener" target="_blank">#bash</a> script that became a <a href="https://mstdn.science/tags/Python" class="mention hashtag" rel="nofollow noopener" target="_blank">#Python</a> script and is now a package. All because I was too lazy to label plates and tubes in the lab by hand. The post is mostly about the history and motivation behind the package, i.e. the stuff that does't really fit into the README<a href="https://www.gl-eb.me/blog/posts/2025-05-25_generate-labels/" rel="nofollow noopener" translate="no" target="_blank">https://www.gl-eb.me/blog/posts/2025-05-25_generate-labels/</a><a href="https://mstdn.science/tags/quarto" class="mention hashtag" rel="nofollow noopener" target="_blank">#quarto</a> <a href="https://mstdn.science/tags/foss" class="mention hashtag" rel="nofollow noopener" target="_blank">#foss</a> <a href="https://mstdn.science/tags/Pypi" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pypi</a> <a href="https://mstdn.science/tags/uv" class="mention hashtag" rel="nofollow noopener" target="_blank">#uv</a>

Recent searches

Search options

Administered by:

Server stats:

#pypi