user: miketheman

592 karma | created 14 years ago

https://miketheman.dev

recent submissions

Anthropic Invests $1.5M in the Python Software Foundation and OSS Security (pyfound.blogspot.com)

7 pts|1 month ago|1 comment

(no title)

2 months ago|discuss

(no title)

2 months ago|discuss

(no title)

2 months ago|discuss

PyPI in 2025: A Year in Review (blog.pypi.org)

79 pts|2 months ago|42 comments

PyPI and Shai-Hulud: Staying Secure Amid Emerging Threats (blog.pypi.org)

3 pts|3 months ago|discuss

(no title)

3 months ago|discuss

PyPI: Trusted Publishing Growth, Now for GitLab Self-Managed and Organizations (blog.pypi.org)

2 pts|3 months ago|discuss

(no title)

4 months ago|discuss

White Paper: Slippery Zips and Sticky Tar-Pits: Security and Archives (alpha-omega.dev)

2 pts|4 months ago|1 comment

Open Infrastructure Is Not Free: PyPI, the PSF, and Sustainability (pyfound.blogspot.com)

8 pts|4 months ago|discuss

Datadog supports PyPI and the Python community through observability (opensource.datadoghq.com)

1 pts|4 months ago|discuss

(no title)

5 months ago|discuss

PyPI Blog: Token Exfiltration Campaign via GitHub Actions Workflows (blog.pypi.org)

76 pts|5 months ago|20 comments

(no title)

6 months ago|discuss

(no title)

6 months ago|discuss

PyPI: Preventing Domain Resurrection Attacks (blog.pypi.org)

5 pts|6 months ago|2 comments

PyPI now serves project status markers in API responses (blog.pypi.org)

2 pts|6 months ago|discuss

Preventing ZIP parser confusion attacks on Python package installers (blog.pypi.org)

48 pts|6 months ago|17 comments

PyPI Phishing Attack: Incident Report (blog.pypi.org)

8 pts|7 months ago|1 comment