corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0c529-e517-7146-90a1-5764f0ae4d47

The Python Packages You Didn’t Install Are Now Your Biggest Security Risk

anaconda.com · published 16 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at anaconda.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
12
Words captured
2,278

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
Update: Ongoing Investigation and Continued Remediation Read at the source ↗
aquasec.com
How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM Read at the source ↗
snyk.io
https://www.wiz.io/blog/axios-npm-compromised-in-supply-chain-attack
wiz.io
https://simonwillison.net/2026/Mar/31/supply-chain-attack-on-axios/
simonwillison.net
https://kevinkeller.org/posts/layered-architecture-python-conda-supply-chain-security/
kevinkeller.org
https://www.anaconda.com/docs/reference/policies-practices/security
anaconda.com
How Anaconda Builds Production Python on Conda’s Architecture Read at the source ↗
anaconda.com
We should all be using dependency cooldowns Read at the source ↗
blog.yossarian.net
https://nesbitt.io/2026/03/04/package-managers-need-to-cool-down.html
nesbitt.io
https://github.com/conda/conda/issues/15759
github.com
https://en.wikipedia.org/wiki/XZ_Utils_backdoor
en.wikipedia.org
https://www.anaconda.com/contact/sales
anaconda.com