Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.
Requests support for Python 2.7 and 3.6 will be ending in 2022. While we don't have exact dates, Requests 2.27.x is likely to be the last release series providing support.