Install
PyPI Malware and Supply Chain Attacks
PyPI Malware and Supply Chain Attacks in Python: the news, the names and what changed.
- 15 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in PyPI Malware and Supply Chain Attacks
Sticky in process, gone on restart: auditing the state your CLI daemon keeps in memory
1+ hour, 50+ min ago (589+ words) A containment flag can be wired correctly, tested, documented, and still be a containment flag you do not have. The wiring is only half the story. The other half is where the baseline lives. Here is the whole audit, with…...
Rate Limiting: The Traffic Cop Your API Needs
1+ hour, 44+ min ago (317+ words) Your API can be perfectly designed and still fail when too many requests hit it at once. That’s where rate limiting comes in. Rate limiting controls how many requests a client can make to your API within a specific period....
Hash the Prompt Before You Cross the Wire
2+ hour, 48+ min ago (1133+ words) Remote help is not free if the hop is slow. A prompt that never leaves disk cannot leak. The cheap path is a local cache with a measured fill. Most coding assistants resend the same context twice. The second trip…...
Unknown `.apc/` Paths Should Not Become Hidden Instructions
2+ hour, 45+ min ago (532+ words) A repository can contain a file under.apc/ without making that file part of the APC contract. The APC folder structure specification says consumers ignore unknown paths unless a formal APC extension defines them. That small rule gives teams room…...
Workshop: Catch Shared-Host Drift With a Five-Probe Floor Card in 85 Minutes
2+ hour, 48+ min ago (594+ words) Measurement talk in developer circles often outruns the tests that still discriminate. When a host starts returning fluent prose, empty objects, or a constant label, yesterday's demo stops being evidence. A floor card is deliberately small so a classroom can…...
DeepSeek Harness: агент, который целиком собран из плагинов
2+ hour, 50+ min ago (136+ words) Открытая платформа, где модель, песочница и даже хранение сеансов — заменяемые модули. Разбираем, как собрать агента под задачу и не потерять контроль. Tagged with ai, agents, opensource, programming....
Token Buckets Do Not Belong on Free Inference
2+ hour, 58+ min ago (774+ words) Admission control is a fence, not a conversation. A free language-model call is a variable-latency guess with an untrusted prompt surface, and it does not belong on the path that decides whether a request may enter a production service. Load…...
Debunking the Fixed Window rate limiting "boundary burst" myth
3+ hour, 4+ min ago (39+ words) Why the "burst at boundary" problem in Fixed Window rate limiting is mostly a myth, and how the Flexible Fixed Window algorithm (per-client window starts) handles bursts and infrastructure protection in practice. Tagged with ratelimiting, security, algorithms....
The Empty Check Passed on a Full Ring
3+ hour, 18+ min ago (855+ words) The ring reported empty after a full lap. Full and empty shared one modulus check. I lost every payload and still kept green tests. Why did review miss this quiet bug? The happy path never filled the whole buffer. There…...
Build a Read-Only Eval Slice Before Giving Free Inference Write Authority
4+ hour, 15+ min ago (594+ words) So I refuse to give a completion write authority until a read-only eval slice can fail in public. The slice uses the same provider protocol the production route will use, minus the database mutation. Think of it like a dress…...