64d ago

GitHub added a 3-day Dependabot cooldown; PyPI now blocks new files on releases older than 14 days. Measures limit impact of malicious packages after recent high-profile supply-chain attacks. https://

GitHub added a 3-day Dependabot cooldown; PyPI now blocks new files on releases older than 14 days. Measures limit impact of malicious packages after recent high-profile supply-chain attacks. https:// threatintel.cc/2026/07/27/gith ub-pypi-add-timebased-defenses.html

1 reportother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

GitHub added a 3-day Dependabot cooldown; PyPI now blocks new files on releases older than 14 days. Measures limit impact of malicious packages after recent high-profile supply-chain attacks. https://

mastodon:infosec-exchangeother64d ago kagi ↗

GitHub added a 3-day Dependabot cooldown; PyPI now blocks new files on releases older than 14 days. Measures limit impact of malicious packages after recent high-profile supply-chain attacks. https:// threatintel.cc/2026/07/27/gith ub-pypi-add-timebased-defenses.html