Stealing SSH and GPG keys. According to Martini, the malicious code was present only in the jeIlyfish library. The python3-dateutil package didn't contain malicious code of its own, but it did ...

This package, too, mimicked the name of a popular Python library, named "colorama." According to the PyPI Stats service, 54 users had downloaded the package a month before it was taken down.

New Python language libraries with end-to-end integrity help organizations build software safer and more efficiently . KIRKLAND, Wash., May 14, 2025 /PRNewswire/ -- Chainguard, the secure ...