Read issue #1 of Daily Digest, by Mailbrew Team.
21
Wednesday October, 2026
litellm 1.107.0 on PyPI is compromised

the payloads run on every python start on the machine and not just when you import litellm. Your IDE, pip, CI jobs everything python on that host is affected.

It steals ssh keys, aws credentials, browser passwords, shell history and AI coding tool configs. The backdoor runs as a …

Info for Python users regarding eMudhra / emSign CA certificate security incident

A security incident affecting eMudhra intermediate certificates has required removing the emSign root CA certificate from CA bundles such as “certifi”. It’s important to immediately upgrade the software packages below to at least the versions specified and rebuild container images to fetch the latest system certificates. Failure to …

Request for feedback: uv check & PEP 723 script support in ty

We've been working on PEP 723 inline metadata support for ty both on the command line (ty check) and in the IDE (code navigation, autocompletion, etc) for a while now; we're finally at a stage where we're ready for more people to try it out and let us …

Anaconda - what is the word on the street, would you work there?

Is this company (Anaconda) doing well, would you work there?

Have you heard anything positive or negative about working there?

Thanks.

How much time to wait before adopting a new Python version ?

I tried to start using 3.15, but a lot of libraries don't have packages that support it yet.

In your own experience, what's a good amount of time to wait where most of the libraries support the new version? 1 month, 3 months, 6 months?

Python Hash Verification

My boss is thinking about using python in a secure VPN environment. Because of this, we have to validate the hash of the python download and any libraries used.

I looked on the site but didn't see anything. Is there somewhere we can find the hash value so we …

Epic isn’t just an EHR. It’s a data platform, and Python is how you get value out of it

I’ve been thinking a lot about how we describe Epic. Most people talk about it as clinical software for charting, orders and billing. But if you work on the data side, it looks more like a data platform: a huge, structured record of nearly everything that happens in a health …

Twitter, RSS, YouTube, Newsletters, Weather, Calendar, ...

You can customize this digest to include all the sites and sources you want.