Discord Contact

Phylum Insights and Resources

Python Executable Hooks

Python Executable Hooks

Phylum Insights and Resources
Python customization modules in user or global site-packages directories can carry malicious code that runs every time the Python interpreter does.
Charles Coggins 4 min read

Phylum Blocks Software Supply Chain Security Attacks

Phylum identifies malicious or risky open-source packages before they enter the software supply chain.

SCA or public databases
82%

of Phylum’s findings are not found by
SCA or reported to public databases

Other curation tools
70%

of Phylum’s findings are not found by
other curation tools

Other software supply chain companies
60%

of Phylum’s findings are not found by
other software supply chain companies

Subscribe to our insights

Keep up with the latest insights

⏲Please hold while we check our collection.

Something's gone wrong. Please try again.

Success! Check your inbox for our email.

Modern Python Build Hooks

Modern Python Build Hooks

Arbitrary code execution is possible with build hooks offered by modern Python package installers when building modern PEP-518 pyproject.toml projects....
Charles Coggins 14 min read
Devious Python Build Requirements

Devious Python Build Requirements

Build requirements in Python source distributions allow attackers to execute arbitrary code in an isolated build environment that is automatically deleted after use....
Charles Coggins 11 min read