PyPI
PulseAugur coverage of PyPI — every cluster mentioning PyPI across labs, papers, and developer communities, ranked by signal.
-
MCP ecosystem faces severe typosquatting risks due to AI recommendations
The Model Context Protocol (MCP) ecosystem is vulnerable to typosquatting attacks, where malicious packages with names similar to legitimate ones are distributed. These attacks are particularly effective because MCP lac…
-
Malware infects Mistral AI, TanStack packages, stealing developer credentials
A sophisticated malware campaign dubbed "Mini Shai Hulud" has targeted AI developer ecosystems by compromising popular packages on npm and PyPI. The attackers injected malicious code into Mistral AI's Python packages an…
-
Developer ships 22 OSS packages, prioritizing unique problem-solving
A developer released 22 open-source packages across multiple registries in under 24 hours, adhering to a strict principle that each package must solve a specific problem unmet by existing alternatives. The developer foc…
-
ToolCairn tackles AI agent tool selection with compatibility checks
The author has developed ToolCairn, a new MCP server designed to address the challenge of tool selection for AI agents. While the MCP protocol has standardized tool access, agents still struggle with choosing the right …
-
Salesforce ML package sfskills-mcp now available on PyPI
The sfskills-mcp package, a Model Context Protocol server for Salesforce skills and data, has been added to PyPI. This release allows developers to easily integrate Salesforce data and decision-tree logic into their app…