python Archives - Developer Tech News

Gemini Pro: Google empowers developers with advanced AI capabilities

Ryan Daws — Fri, 15 Dec 2023 12:29:58 +0000

Google has announced the availability of its AI model Gemini Pro for developers and enterprises to craft solutions for their specific needs. This move is accompanied by a commitment to ongoing refinement based on user feedback. Gemini comes in three distinctive sizes: Ultra, Pro, and Nano. The Nano version has already been integrated into Android... Read more »

The post Gemini Pro: Google empowers developers with advanced AI capabilities appeared first on Developer Tech News.

Checkmarx uncovers persistent Python package threat

Ryan Daws — Thu, 16 Nov 2023 13:00:03 +0000

Checkmarx has uncovered a threat actor that has been quietly infiltrating the open-source ecosystem for nearly six months, planting malicious Python packages with a focus on deception and financial gain. The malicious actor employed a systematic approach, disguising their packages with names closely resembling popular legitimate Python packages. These decoy packages, camouflaged to blend in,... Read more »

The post Checkmarx uncovers persistent Python package threat appeared first on Developer Tech News.

Graphcore joins PyTorch Foundation as a general member

Ryan Daws — Thu, 07 Sep 2023 10:32:25 +0000

The PyTorch Foundation, a home for the deep learning community to collaborate on the open-source PyTorch framework and ecosystem, has announced that Graphcore is joining its ranks. Graphcore – a Bristol, UK-based company specialising in designing and manufacturing AI accelerators, hardware, and software tailored for AI and machine learning workloads – has joined as a... Read more »

The post Graphcore joins PyTorch Foundation as a general member appeared first on Developer Tech News.

Malicious PyPI package discovered in ongoing ‘PaperPin’ campaign

Ryan Daws — Fri, 04 Aug 2023 11:05:45 +0000

In a recent analysis conducted by Sonatype, a malicious Python Package Index (PyPI) package named ‘VMConnect’ was discovered masquerading as the legitimate VMware vSphere connector module ‘vConnector’. The counterfeit package was found to contain sinister code designed to compromise users’ systems. Further investigation revealed an ongoing campaign involving additional packages like “ethter” and “quantiumbase,” all... Read more »

The post Malicious PyPI package discovered in ongoing ‘PaperPin’ campaign appeared first on Developer Tech News.

Sonatype uncovers further malicious PyPI and npm packages

Ryan Daws — Fri, 23 Jun 2023 15:47:27 +0000

Sonatype continues to uncover a significant number of malicious packages within the PyPI and npm software registries. Among the flagged packages were several Python packages published on PyPI, masquerading as legitimate libraries named after the popular npm “colors” library. The malicious packages, including names such as “broke-rcl,” “brokescolors,” and “trexcolors,” exclusively targeted the Windows operating... Read more »

The post Sonatype uncovers further malicious PyPI and npm packages appeared first on Developer Tech News.

PyPI suspends new projects and users due to malicious activity

Ryan Daws — Mon, 22 May 2023 15:31:24 +0000

The PyPI (Python Package Index) team has temporarily suspended new projects and users on their platform due to malicious activity. This surge in malicious activity aligns with a larger trend observed across several open-source registries in recent months. Notably, incidents such as the flood of malicious packages on the NPM JavaScript package manager and a... Read more »

The post PyPI suspends new projects and users due to malicious activity appeared first on Developer Tech News.

PyPI will sell ‘Organization’ accounts to corporate projects

Ryan Daws — Mon, 24 Apr 2023 14:49:43 +0000

Python Packaging Index (PyPI) has announced the introduction of ‘Organization’ accounts, as the first step in its plan to build financial support and long-term sustainability. Organizations on PyPI are self-managed teams with exclusive branded web addresses. PyPI aims to make its platform easier to use for large community projects, organisations, or companies that manage multiple... Read more »

The post PyPI will sell ‘Organization’ accounts to corporate projects appeared first on Developer Tech News.

Clipper malware found in over 451 PyPI packages

Ryan Daws — Wed, 15 Feb 2023 17:16:49 +0000

Phylum security researchers have discovered over 451 packages on the Python Package Index (PyPI) that are infected with “clipper” malware. Clippers replace the contents of a victim’s clipboard with something which benefits the attacker. The most prevalent clippers today look for cryptocurrency addresses and modify them to steal funds. Starting on February 9th, Phylum was... Read more »

The post Clipper malware found in over 451 PyPI packages appeared first on Developer Tech News.

The most in-demand programming languages for 2023

Ryan Daws — Wed, 08 Feb 2023 13:01:13 +0000

Coding Dojo has released its list of the most in-demand programming languages for this year. The list uses the number of open full-time jobs to determine the skills that employers are desperately looking for. Notably, the top three most in-demand languages have been shaken up. Likely driven by the demand for machine learning solutions, Python... Read more »

The post The most in-demand programming languages for 2023 appeared first on Developer Tech News.

Malware campaign targets official Python and JavaScript repos

Ryan Daws — Tue, 13 Dec 2022 16:38:38 +0000

An active malware campaign is targeting official Python and JavaScript repositories. Software supply chain security firm Phylum spotted the campaign. Phylum said that it discovered the campaign after noticing a flurry of activity around typosquats of the popular Python requests package. Typosquats take advantage of simple typos to install malicious packages. In this case, the... Read more »

The post Malware campaign targets official Python and JavaScript repos appeared first on Developer Tech News.