A case of mistaken identity. The problem is that packages in the standard Python library should originate only from their official source, rather than being downloaded from third-party ...

An initiative to remove outdated and unmaintained modules from Python’s standard library has been approved as Python Enhancement Proposal (PEP) 594.The modules being pruned are all antiquated ...

PyPI package 'ctx' and PHP library 'phpass' hijacked to obtain AWS keys. ... Python Package Index (PyPI) module 'ctx' is one of the packages in question, with over 20,000 downloads each week.

Python's ctx library and a fork of PHP's phpass have been compromised. 3 million users combined. The malicious code sends all the environment variables to a heroku app, likely to mine AWS credentials.

Stealing SSH and GPG keys. According to Martini, the malicious code was present only in the jeIlyfish library. The python3-dateutil package didn't contain malicious code of its own, but it did ...