Python Package Security: Understanding PyPI Supply Chain Risks and Mitigation
PyCon Israel via YouTube
Earn Your Business Degree, Tuition-Free, 100% Online!
Finance Certifications Goldman Sachs & Amazon Teams Trust
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore critical supply chain security challenges facing Python developers in this 20-minute PyCon Israel conference talk that examines the widespread use of open-source packages and models, while highlighting the concerning lack of security validation practices. Learn about real-world attacks targeting Python package ecosystems and gain practical recommendations for implementing robust security measures to protect your development pipeline from malicious threats in the PyPi repository.
Syllabus
Eugene Rojavski - Malicious Needle in a Haystack - PyPi Security Pitfalls
Taught by
PyCon Israel