Loading story…
Anthropic committed $1.5 million to the Python Software Foundation (PSF) under a two-year partnership to accelerate security work across the Python ecosystem, with a particular focus on reducing software supply-chain risk affecting the Python Package Index (PyPI) and the broader user base. The funding is intended to advance the PSF’s security roadmap and strengthen defenses against malicious packages and other ecosystem-level threats that can impact millions of developers and downstream organizations.
Planned work includes building automated tooling to review every package uploaded to PyPI, shifting detection from largely report-driven, after-the-fact responses toward proactive screening, and creating a dataset of known malware to support capability analysis and tool development. The effort builds on PSF’s ongoing security initiatives led by Security Developer in Residence Seth Larson and supported by PyPI Safety and Security Engineer Mike Fiedler, and is positioned as potentially reusable for other open-source package repositories beyond Python.
Trace attribution and downstream blast radius.
2 events from the most recent confirmed update back to the earliest known activity.
As part of the funded work, the PSF said it plans to build tooling to automatically review every package uploaded to PyPI rather than relying mainly on report-driven detection. The foundation also plans to create a dataset of known malware to inform capability analysis and the design of new security tools.
Anthropic entered a two-year partnership with the Python Software Foundation, committing $1.5 million to improve security across the Python ecosystem. The funding supports the PSF security roadmap, including security upgrades for CPython and PyPI aimed at reducing software supply-chain risk.
See attribution and downstream blast radius, and whether this package or vendor reaches your builds.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Python Software Foundation disclosed a **critical authentication bypass** in the `python.org` release management API that could have let attackers forge administrator-level requests and modify Python release metadata. The flaw, reported by Splitline Ng of DEVCORE and confirmed by the Python Security Response Team, could have enabled changes to download and verification URLs for official Python installers, creating a path to distribute tampered files through trusted `python.org` infrastructure. The vulnerable logic reportedly dated back to 2014, affecting the release pipeline for more than a decade, but maintainers said post-incident forensics found **no evidence of exploitation**. The PSF patched the issue rapidly, with production fixes deployed within 24 hours and broader remediation completed within 48 hours, while also disabling risky API behavior and tightening release controls. Additional hardening included stricter URL validation, mandatory HTTPS enforcement, negative authentication test coverage, longer log retention, and stronger provenance measures around release artifacts, including emphasis on **Sigstore** alongside existing **PGP** signing. A subsequent Trail of Bits review funded by OpenAI reportedly found no additional authentication or authorization flaws, and the Foundation said the changes were designed to reduce the risk of unauthorized modification of Python downloads distributed via official channels.
Jul 12, 2026
The Python Software Foundation (PSF) has declined a $1.5 million grant from the U.S. National Science Foundation (NSF) after determining that the funding terms would require the organization to abandon its commitment to diversity, equity, and inclusion (DEI) initiatives. The grant, intended to support projects enhancing the safety, security, and privacy of open-source ecosystems such as Python and the Python Package Index (PyPI), included contract language prohibiting recipients from operating any programs that advance or promote DEI, impacting all PSF activities and not just those funded by the grant. PSF leadership cited the ethical conflict and significant financial risk posed by a "claw back" provision, which would allow the government to reclaim previously disbursed funds if the terms were violated. The foundation emphasized that DEI is central to its mission and values, making the NSF's conditions incompatible with its operations. As a result, the PSF unanimously voted to withdraw from the grant, foregoing funding that would have supported the development of automated malware-detection tools for PyPI and other open-source platforms.
Jun 29, 2026
The Python Software Foundation advisory database published two new records, `PSF-2026-14` and `PSF-2026-15`, in its `python_advisories` feed. Both entries were exposed as raw JSON files in the PSF advisory repository, but the available reference data did not include a published date, affected package name, vulnerability type, severity, or a synopsis describing the underlying issue. The additions indicate newly tracked Python ecosystem security advisories, but the public metadata currently visible in the referenced records is limited to the advisory identifiers themselves. Security teams monitoring Python package risk should watch for follow-up details in the PSF advisory database to determine affected components, exposure, and any required remediation once the records are populated.
Jun 29, 2026