
Research
TeamPCP Compromises Telnyx Python SDK to Deliver Credential-Stealing Malware
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
logutilkit
Advanced tools
A simple Python logging package with rotating file handlers and console output.
python > 3.5
pip install logutilkit
#!/usr/bin/python3
from logutilkit import logger
log = logger.logger()
log.critical("This is a critical level message!")
log.error("This is an error level message!")
log.warning("This is a warning level message!")
log.info("This is an info level message!")
log.debug("This is a debug level message!")
pip install logutilkit
pip install --upgrade logutilkit
pip uninstall logutilkit
pip search logutilkit
setuptools and wheel:python3 -m pip install --user --upgrade setuptools wheel
setup.py is located:python3 setup.py sdist bdist_wheel
dist directory:dist/
logutilkit-0.52-py3-none-any.whl
logutilkit-0.52.tar.gz
The .tar.gz file is the source archive, and the .whl file is the built distribution.
Use twine to upload the distribution packages. First, install Twine:
python3 -m pip install --user --upgrade twine
Note: On Windows, configure your environment variables and restart your terminal if needed.
Rebuild the package:
python3 setup.py sdist bdist_wheel
Upload all archives in the dist directory using Twine:
twine upload dist/*
You will be prompted to enter your PyPI username and password. After completion, you should see output similar to:
Enter your username: Tinywan
Enter your password:
Uploading distributions to https://upload.pypi.org/legacy/
Uploading logutilkit-0.52-py3-none-any.whl
100%|████████████████████████████████████| 10.5k/10.5k [00:03<00:00, 3.31kB/s]
Uploading logutilkit-0.52.tar.gz
100%|████████████████████████████████████| 9.50k/9.50k [00:01<00:00, 9.24kB/s]
UnicodeDecodeError: 'gbk' codec can't decode byte 0x80 in position 197: illegal multibyte sequence
Solutions:
FILE_OBJECT = open('order.log', 'r', encoding='UTF-8')FILE_OBJECT = open('order.log', 'rb')twine : The term 'twine' is not recognized as a cmdlet, function, script file, or operable program.
Configure your environment variables to include the Python Scripts directory.
MIT License
Tinywan (756684177@qq.com)
FAQs
A small log package
We found that logutilkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.

Security News
/Research
Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.