With a July update, the Python package manager will finally allow users to install only the dependencies for a project, without having to install the project itself.

This week’s ThreatsDay Bulletin covers malicious packages, fake apps, AI prompt attacks, exposed systems, weak defaults, and stealthy malware traffic.