🧰 PyPI ecosystem

The items that name it 3

• Sign Here: Attributing a Source for a More Trustworthy Software Supply Chain
  paper2026-10-20It is written here as PyPI ecosystem (764 thousand packages indexed).

  764 thousand packages indexed

• Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
  article2026-06-18

  ensmallen and roughly two dozen related machine-learning and bioinformatics packages compromised in the Hades campaign (June 8, 2026)

• The OpenSourceMalware Show #7
  talk2026-06-03

  Growing at a comparable rate to npm in malicious package activity per OSM data Jan–mid-May 2026; affected by Miasma worm (multi-ecosystem)