Jul 5, 2026 - Seven months of watching people typo NLTK on PyPI
A long time ago, I uploaded a benign typosquatting package to PyPI to measure how often people accidentally type 'ntlk' instead of 'nltk'. Over seven months, this amassed 28,839 installs (not just downloads) from 10,938 unique IPs - including from corporate and government networks. Read more

Mar 1, 2026 - It's tax season! You can tell by the malware campaigns impersonating the IRS
A quick dive into a hilariously unconvincing, malware-laden email that I received which is impersonating the IRS. I love the self-assessment model for taxes in the USA, the billion-dollar companies that profit off taxes being confusing and difficult, and hundreds of millions of dollars spent in lobbying to keep it that way. It's great for everyone and has only positive network effects. This is sarcasm. Read more