These are my go-to libraries for Python data crunching.

Writing secure code is hard. When you learn a language, a module or a framework, you learn how it supposed to be used. When thinking about security, you need to think about how it can be misused.

While Excel is ubiquitous, I prefer Python for my data analysis. Spreadsheets are great for formatting data, but it's Python that's allowed me to build my own super calculator out of regular Python ...

Vulnerabilities in popular AI and ML Python libraries used in Hugging Face models with tens of millions of downloads allow remote attackers to hide malicious code in metadata. The code then executes ...

This is a Python 3 library that helps interface with Motoron motor controllers using I²C or UART serial. We have mainly tested this library on Raspberry Pi single-board Linux computers and MicroPython ...

An investigation into what appeared at first glance to be a “standard” Python-based infostealer campaign took an interesting turn when it was discovered to culminate in the deployment of a ...

What if the programming language you rely on most is on the brink of a transformation? For millions of developers worldwide, Python is not just a tool, it’s a cornerstone of their craft, powering ...

Cybersecurity researchers have discovered two new malicious packages in the Python Package Index (PyPI) repository that are designed to deliver a remote access trojan called SilentSync on Windows ...

Note: There is a more modern version of this package called Python-Blosc2 which supports many more features and is more actively maintained. Visit it at: https ...

On June 11, 2025, the Python core team released Python 3.13.5, the fifth maintenance update to the 3.13 line. This release is not about flashy new language features, instead, it addresses some ...

A malicious Python package named 'fabrice' has been present in the Python Package Index (PyPI) since 2021, stealing Amazon Web Services credentials from unsuspecting developers. According to ...

The Socket Research Team has identified a malicious Python package named ‘fabrice’, which poses as the popular ‘fabric’ SSH automation library and steals AWS credentials from unsuspecting developers.