Stay updated with breaking news from Python Package Index. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
!["Trusted publishers" on the Python Package Index [LWN.net] - Vimarsana News](https://vimarsana.com/images/vimarsana-bigimage.jpg)
The Python Package Index (PyPI) has, like many language-specific repositories, had ongoing problems with malicious uploads. PyPI is now launching an authentication mechanism called trusted publishers in an attempt to fight this problem.
Malware-as-a-service hackers from Spain decided to use a public code repository to openly advertise their wares.
MacOS might seem impregnable, but as António Vasconcelos explains, it is still easily compromised.
The PyPI package flood is just the latest in a string of attacks on public repositories with the intent to plant malicious code.
The PyPI package flood is just the latest in a string of attacks on public repositories with the intent to plant malicious code.