Everything you may have missed from the past week.

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...

OpenAI has acquired Astral, the company behind Python tools uv and Ruff, to integrate them into its Codex platform as it ...

UC San Diego cognitive scientist Philip Guo created Python Tutor, a free tool that makes code “visible” step by step. The ...