Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI VersionsThe Hacker News·Dec 7, 10:54 UTC · Dec 7, 2024Malware42
Malicious PyPI Package Exposes Crypto Wallets to Infostealer CodeInfosecurity Magazine·Nov 28, 17:15 UTC · Nov 28, 2024Malware55
PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User DataThe Hacker News·Oct 2, 05:31 UTC · Oct 2, 2024Threat actor57
Watch Out: These PyPI Python Packages Can Drain Your Crypto WalletsThe Hacker News·Mar 12, 15:56 UTC · Mar 12, 2024Malware42
Malicious PyPI Packages Slip WhiteSnake InfoStealer Malware onto Windows MachinesThe Hacker News·Jan 29, 13:19 UTC · Jan 29, 2024Malware30
North Korean Hackers Deploy New Malicious Python Packages in PyPI RepositoryThe Hacker News·Sep 5, 13:56 UTC · Sep 5, 2023Malware142
VMConnect: Python PyPI Threat Imitates Popular ModulesInfosecurity Magazine·Aug 4, 17:00 UTC · Aug 4, 2023Ransomware57
Dozens of Malicious 'HTTP' Libraries Found on PyPIInfosecurity Magazine·Feb 23, 16:30 UTC · Feb 23, 2023Malware30
Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!The Hacker News·Feb 15, 00:00 UTC · Feb 15, 2023Malware42
Fortinet observed three rogue PyPI packages spreading malwareSecurity Affairs·Jan 17, 11:23 UTC · Jan 17, 2023Malware30
Python packages caught attempting to steal Discord tokens, credit card numbersThe Record·Dec 14, 00:00 UTC · Dec 14, 2022Vulnerability42
Anthropic Finds Claude Breached Real Companies During Security EvaluationsSecurity Affairs·Jul 31, 08:55 UTC · Jul 31, 2026Data breach45
Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux HostsThe Hacker News·Jan 24, 08:06 UTC · Jan 24, 2026Malware42
AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse ConcernsThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2025Vulnerability in the wild157
Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain AttacksThe Hacker News·Aug 19, 04:18 UTC · Aug 19, 2025Exploit / PoC157
Malicious Machine Learning Model Attack Discovered on PyPIInfosecurity Magazine·May 27, 14:00 UTC · May 27, 2025Malware42
New Malware on PyPI Poses Threat to OpenInfosecurity Magazine·May 19, 16:45 UTC · May 19, 2025Malware42
Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ TimesThe Hacker News·May 7, 07:37 UTC · May 7, 2025Malware42
Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive DataThe Hacker News·Apr 7, 06:40 UTC · Apr 7, 2025Malware42
Compromised AI Library Delivers Cryptocurrency Miner via PyPIInfosecurity Magazine·Dec 9, 16:30 UTC · Dec 9, 2024Vulnerability42
PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python LibrariesThe Hacker News·Nov 23, 06:39 UTC · Nov 23, 2024Malware155
New PyPI Package Zlibxjson Steals Discord, Browser DataInfosecurity Magazine·Jul 31, 14:15 UTC · Jul 31, 2024Malware30
New PyPI Malware “Pytoileur” Steals Crypto and Evades DetectionInfosecurity Magazine·May 29, 16:15 UTC · May 29, 2024Malware30
New Malicious PyPI Packages Caught Using Covert SideThe Hacker News·Feb 20, 13:49 UTC · Feb 20, 2024Malware42
Software supply chain attacks are getting easierHelp Net Security·Jan 24, 00:00 UTC · Jan 24, 2024Malware55
116 Malware Packages Found on PyPI Repository Infecting Windows and Linux SystemsThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2023Malware42
27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT ExpertsThe Hacker News·Nov 17, 12:15 UTC · Nov 17, 2023Malware42
Labyrinth Chollima behind PyPI supply chain attacksSecurity Affairs·Sep 1, 11:36 UTC · Sep 1, 2023Malware42
Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPIThe Hacker News·Mar 6, 07:41 UTC · Mar 6, 2023Malware42
Colour-Blind, a fully featured info stealer and RAT in PyPISecurity Affairs·Mar 6, 06:19 UTC · Mar 6, 2023Malware30
Researchers Uncover Obfuscated Malicious Code in PyPI Python PackagesThe Hacker News·Feb 11, 10:33 UTC · Feb 11, 2023Exploit / PoC157
Researchers Uncover 3 PyPI Packages Spreading Malware to Developer SystemsThe Hacker News·Jan 17, 09:38 UTC · Jan 17, 2023Malware42
PyTorch Machine Learning Framework Compromised with Malicious DependencyThe Hacker News·Jan 5, 05:00 UTC · Jan 5, 2023Data breach157
Researchers Uncover PyPI Package Hiding Malicious Code Behind Image FileThe Hacker News·Nov 10, 12:44 UTC · Nov 10, 2022Threat actor57
29 malicious PyPI packages spotted delivering the W4SP StealerSecurity Affairs·Nov 5, 21:43 UTC · Nov 5, 2022Malware30
Researchers Uncover 29 Malicious PyPI Packages Targeted Developers with W4SP StealerThe Hacker News·Nov 5, 08:35 UTC · Nov 5, 2022Malware42
Warning: PyPI Feature Executes Code Automatically After Python Package DownloadThe Hacker News·Sep 11, 04:06 UTC · Sep 11, 2022Vulnerability142
Week in review: RCE bug in GitLab patched, phishing PyPI users, Escanor malware in MS Office docsHelp Net Security·Aug 28, 00:00 UTC · Aug 28, 2022VulnerabilityCVE-2022-2884160
Newly Uncovered PyPI Package Drops Fileless Cryptominer to Linux SystemsThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2022Malware55
10 Credential Stealing Python Libraries Found on PyPI RepositoryThe Hacker News·Aug 10, 05:22 UTC · Aug 10, 2022Malware55