Security

Lightning Got Owned: When `import lightning` Steals Your Credentials

April 30, 2026

Astral told you how they secure uv. Here's what to keep.

April 16, 2026

PyPI's Second Audit Found 14 Bugs. Two Remain.

April 16, 2026

LLM-Powered Copycats Are Flooding PyPI

April 8, 2026

LiteLLM Got Owned, and Your Dependencies Might Be Next

March 24, 2026

Pydantic Monty: A Secure Python Interpreter for AI Agents

February 6, 2026

Dependabot Now Supports uv

March 14, 2025