We are carrying the following patch to address the issue (it both ignores the empty directories, and looks at directories in deterministic sorted order): --- a/Lib ...

Newly discovered campaign takes advantage of the fact that most vulnerability scanning tools don't read compiled open-source software. Attackers who are targeting open-source package repositories like ...

PyTorch has identified a malicious dependency with the same name as the framework's 'torchtriton' library. This has led to a successful compromise via the dependency confusion attack vector. PyTorch ...

Derrie Thickett is a freelance List Writer for GameRant. Derrie's love for video games started when he received a copy of The Elder Scrolls: Morrowind as a Christmas gift. He can usually be found in ...

In python/importlib_metadata#350, I observed that the tests on Python 3.10 started failing. Looking at a diff of the dependencies, I can see that the issue is brought ...