#pypi

Articles tagged with #pypi

May 5, 2026
May 5, 202611 min read314 views
Binance Fixed the IP Whitelist Gap. The Disclosure Process Is Still Broken.
I reported the listenKey issue in December 2024. Thirteen days of recent supply-chain findings pushed me to re-test it — and the vulnerability now appears closed after being rejected as “Social Engineering.”
11 min read314 views
May 5, 2026
May 5, 202613 min read59 views
The PyPI Package Was Clean. That Was the Problem.
A near-identical clone of my Binance WebSocket library had no payload — but it spoofed identity, shadowed the import path, linked to a 404 repo, and came from the same account as pybotnet.
13 min read59 views

#pypi - Technopathy