Incident Report: Organizations Team privileges

By:
On:
In: Website

On April 14, 2025 security@pypi.org was notified of a potential security concernrelating to privileges granted to a PyPI User via Organization Teams membershippersisting after the User was removed from the PyPI Organization the Team belongs to. We validated the report as a true finding, identified all cases where this scenariohadContinue Reading

Introducing our new Terms of Service

By:
On:
In: Website

We’re introducing a newTerms of Serviceto formalize our relationship to usersand enable us to move forward with providing new features and services,specificallyOrganization Accounts. PyPI has had some form of Terms of Usedocument for users since itbegan accepting uploads in 2005and has only been updated twice1 since.These terms have primarily servedContinue Reading

PyPI Now Supports Project Archival

By:
On:
In: Website

Support for marking projects as archived has landed on PyPI. Maintainers can nowarchive a project to let users know that the project is not expected to receiveany more updates. This allows users to make better decisions about which packages they depend on,especially regarding supply-chain security, since archived projects clearlysignal thatContinue Reading

Project Quarantine

By:
On:
In: Website

Earlier this year, I wrote briefly about new functionality added to PyPI, theability to quarantine projects.This feature allows PyPI administrators to mark a project as potentially harmful,and prevent it from being easily installed by users to prevent further harm. In this post I’ll discuss the implementation, and further improvements toContinue Reading

Supply-chain attack analysis: Ultralytics

By:
On:
In: Website

Last week, the Python project “ultralytics” suffered a supply-chain attack through a compromise of the projects’ GitHub Actions workflows and subsequently its PyPI API token. No security flaw in PyPI was used to execute this attack. Versions 8.3.41, 8.3.42, 8.3.45, and 8.3.46 were affected and have been removed from PyPI.Continue Reading

Best Linux VPS Providers – Top 10 Ranked

By:
On:
In: VPS, Cloud, Hosting, Servers

Nowadays, people struggle to find the Best Linux VPS providers with affordable prices, an on-time and technical support team, no hidden fees, global locations, various payment methods, and hassle-free. Criteria for Ranking Best Linux VPS Providers Based on the customer reviews, I found that today, people are looking for decent and round-the-clockContinue Reading

How to Set Up a Virtual Machine Host With Ubuntu Server

By:
On:
In: Admin, More, Open Source, Server, Servers, VPS

Virtual machines (VMs) are computer systems-within-computers. Each VM runs its own operating system and simulated hardware, providing it with autonomy from its host machine and offering strong isolation for resource intensive applications. Ubuntu Server is an emerging enterprise virtualization option that offers many benefits to businesses. In this article we’llContinue Reading

Cheap Dedicated Server Hosting

By:
On:
In: More

Dedicated server hosting is ideal for businesses that manage multiple employees or manage data; or who deal with eCommerce transactions. A managed dedicated server provides businesses without technical skills or time needed to administer their own servers with reliable server solutions. Cheap Dedicated Server Hosting involves renting out an entireContinue Reading

Managed Dedicated Server Hosting

By:
On:
In: More

Full managed dedicated servers are an ideal choice for businesses relying on mission-critical applications, providing complete control of server configuration and software installation. Furthermore, customers can tailor the hosting environment according to their own individual requirements by adding add-on services that suit them specifically. Server management takes time and resources;Continue Reading