Mastodon Feed: Post

Mastodon Feed

Boosted by glyph ("Glyph"):
sethmlarson ("Seth Larson") wrote:

RE: https://social.rust-lang.org/@rust/117288095334006877

The lovely folks from @rust gave me a shoulder-tap in one of our mutual security discussion channels about these ongoing attacks:

https://blog.rust-lang.org/2026/09/17/targeted-attacks/

There's no particular reason the attackers wouldn't do the same to maintainers of Python projects. Please remain vigilant and send anything strange to security@python.org so we can alert others if needed.

#python #security #supplychain #pypi