The official blog of the Python Package Index

PyPi taking on the problem of malware finding its way into packages. Often through packages squatting on names similar to the real thing.