The Hacker News

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

Brotli decoder flaw CVE-2026-111497 affects Node.js, Bun, Python packages and Envoy; code execution was demonstrated on one ...
The Hacker News

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

A Critical Vulnerability in PHP. So, Is Python Safe? Thinking About the 'Free and Easy' Side and the Value of Commercial Software

The other day, I saw the news about a critical vulnerability in PHP, which made me think about it all over again.On October ...

94% of top PyPI packages feature native Windows on Arm support

Anaconda now hosts 2,500 Arm packages, while NumPy and SciPy publish native wheels to aid data scientists migrating off ...
Boston University

Python Packages

The “pip” command with the “list” method will print a list of all centrally and locally installed PyPI packages and their versions. Because most of our packages are installed this way, this is the ...

Python Defenses for the Day Your AI Library Gets Hijacked: Four Layers of Pinning, Cooldown, Verification, and Monitoring—What Gets Stopped, What Gets Through, …

This is written for those who use AI or LLM libraries in Python and haven't decided where to stop or how to detect when a ...
BIOENGINEER

New Python Package Puts Biomarker Discoveries to the Test Before They Reach the Clinic

A new open-source Python package called ROOFS benchmarks multiple feature selection methods on a researcher's own data, ...