An Empirical Study of Malicious Code In PyPI Ecosystem · HackerPapers discussionshttps://hackerpaper.kaipfister.de/p/2309.11021/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:16:22 GMTAn Empirical Study of Malicious Code In PyPI Ecosystem — mentioned by evanjrowleyhttps://news.ycombinator.com/item?id=38422051urn:hackerpapers:mention:2309.11021:38422051Sun, 26 Nov 2023 15:00:23 GMT<p>There is a belief that risk of vulnerabilities introduced by insecure package ecosystems goes up with the number of dependencies. For example, a study on this was recently conducted for PyPI. https://arxiv.org/abs/2309.11021</p><p><a href="https://hackerpaper.kaipfister.de/p/2309.11021/">Paper and discussion history</a>. A mention is not an endorsement.</p>cs.SE