Cheese Must Stand: Defending the Python Library Ecosystem in 2025
summary
Chronicles 2024 exploits like the Ultralytics token compromise and the NP6 typosquatting plus DLL sideloading chain show concrete attack vectors, and the 2022 PyTorch dependency confusion incident shows how transitive deps get exploited. The talk explains mitigations actually used: Sigstore provenance logs, SLSA levels, SBOMs, scanners Grype and Trivy, and Chainguard’s Guarded Ecosystems that rebuild packages from source and publish an alternative index, with deployment numbers and remediation steps.
AI-written summary · about
chapters (12)
- 0:00Supply chain security in Python
- 1:04Speaker introduction
- 3:30Python infrastructure growth
- 5:35Software supply chain security
- 8:25Recent PyPI attacks
- 10:08PyTorch supply chain attack
- 14:18Ultralytics YOLO incident
- 16:03PyPI security tools
- 18:36ChainGuard Libraries
- 20:02ChainGuard Factory
- 23:56Key takeaways
- 26:23Q&A
related talks
41mHelping the PyTorch Community Improve the Security Posture of th...
20mMalicious Needle in a Haystack - PyPi Security Pitfalls
21m#7 Open Source Forum 2019 Dan Lorenc
25m"Security considerations in Python Packaging"
14mKeynote: The Human Cost of Security in the AI Era
45mSecuring Software Supply Chain: Problems, Solutions, and AI/ML Challenges
34mThe elephant in the room dependencies: securing your software supply chain
13mKeynote: Hacking the OSS Supply Chain