Python’s CVEs triple in a year as PyPI removes 60% more malware

Seth Larson, the Python Software Foundation’s Security Developer-in-Residence, has put numbers on the ecosystem’s security load: CVEs in Python and pip tripled in a year and PyPI now removes 60% more malware. DevOps teams should lock down their dependency chains, because this signal volume is not going to fall back.