Python Software Foundation

mentions 3 type Person feed RSS

// recent coverage 3 mentions

14:09

2026-07-04

byteiota.com

ai-safety

Slopsquatting: Your AI Coding Agent Is Now a Supply Chain Risk

On February 17, 2026, attackers compromised the Cline AI coding tool via a malicious npm package, silently installing OpenClaw on 4,000 developers' machines through a postinstall script. This "slopsqu…

16:43

2026-06-10

lwn.net

ai-safety

Larson: Are insecure code completions a vulnerability?

Python Software Foundation security developer Seth Larson reported that JetBrains' PyCharm IDE Full Line Code Completion plugin suggests code containing severe vulnerabilities, but JetBrains declined …

18:10

2026-04-13

xint.io

cybersecurity

Finding and Patching a CPython 0day in Hours: CVE-2026-6100

A security researcher used the AI-native tool Xint Code to scan the entire CPython source code, which identified a critical vulnerability (CVE-2026-6100) in the tarfile module within 30 minutes. The b…

// co-occurs with top 8 entities

Seth Larson 2 CPython 1 Xint Code 1 CVE-2026-6100 1 JetBrains 1 PyCharm 1 Full Line Code Completion 1 Cline 1