Search: “PyPI”

177 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 37 Ransomware 36 Threat actor 35 AI safety & security 23 Exploit / PoC 23 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 75 low 13 info 10

OceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI

Kaspersky SecurelistMay 5, 14:33 UTC · May 5, 2026Malware

42

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

The Hacker NewsAug 11, 10:01 UTC · Aug 11, 2024Malware

42

PyPI halted new users and projects while it fended off supply

Ars Technica · SecurityMar 28, 18:50 UTC · Mar 28, 2024Malware

42

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

Help Net SecurityMar 27, 00:00 UTC · Mar 27, 2026Malware

42

Popular PyPI site for developers temporarily blocks functions due to malware campaign

The RecordMar 28, 19:11 UTC · Mar 28, 2024Malware

42

Experts found 3 malicious packages hiding crypto miners in PyPi repository

Security AffairsJan 4, 15:43 UTC · Jan 4, 2024Malware

55

PyPI Implements Mandatory Two

The Hacker NewsMay 31, 04:19 UTC · May 31, 2023Malware

55

PyPI temporarily suspends user sign

Security AffairsMay 21, 15:25 UTC · May 21, 2023Malware

42

Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

The Hacker NewsDec 20, 05:29 UTC · Dec 20, 2022Malware

42

10 malicious packages on PyPI used to steal developers' data

Security AffairsAug 10, 15:14 UTC · Aug 10, 2022Malware

42

New Malicious Python Libraries Found on PyPI Repository

Infosecurity MagazineAug 9, 17:30 UTC · Aug 9, 2022Malware1

55

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

The Hacker NewsMay 7, 09:20 UTC · May 7, 2026Malware

42

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

The Hacker NewsMar 28, 06:25 UTC · Mar 28, 2026Malware

42

Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware

The Hacker NewsFeb 6, 08:40 UTC · Feb 6, 2026Malware

42

PyPI Python Library "aiocpa" Found Exfiltrating Crypto Keys via Telegram Bot

The Hacker NewsNov 29, 08:53 UTC · Nov 29, 2024Malware

42

Dormant PyPI Package Compromised to Spread Nova Sentinel Malware

The Hacker NewsFeb 23, 17:08 UTC · Feb 23, 2024Malware

42

PyPI enforces 2FA to prevent maintainers' account takeover

Security AffairsMay 30, 17:37 UTC · May 30, 2023Malware

42

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

The Hacker NewsMay 23, 06:19 UTC · May 23, 2023Malware

42

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

The Hacker NewsDec 30, 05:06 UTC · Dec 30, 2022Malware1

42

Experts warn of malicious packages on PyPI using steganography

Security AffairsNov 10, 16:15 UTC · Nov 10, 2022Malware

30

A new PyPI Package found delivering fileless Linux Malware

Security AffairsAug 15, 08:18 UTC · Aug 15, 2022Malware

30

11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

The Hacker NewsNov 22, 07:12 UTC · Nov 22, 2021Malware

30

Several Malicious Typosquatted Python Libraries Found On PyPI Repository

The Hacker NewsJul 30, 08:18 UTC · Jul 30, 2021Malware

42

Hades PyPI Attack: 19 Packages Poisoned to Auto

The Hacker NewsJun 9, 10:34 UTC · Jun 9, 2026Malware

42

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

The Hacker NewsJun 9, 16:37 UTC · Jun 9, 2025Malware

42

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

The Hacker NewsMay 20, 05:49 UTC · May 20, 2025Malware1

42

Malicious PyPI Packages Stole Cloud Tokens—Over 14,100 Downloads Before Removal

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2025Malware

42

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The Hacker NewsMar 30, 05:08 UTC · Mar 30, 2024Malware

42

Python Developers Warned of Trojanized PyPI Packages Mimicking Popular Libraries

The Hacker NewsFeb 23, 11:23 UTC · Feb 23, 2023Malware

42

Malicious PyPI package posed as SentinelOne SDK to serve info

Security AffairsDec 20, 00:59 UTC · Dec 20, 2022Malware

42

Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys

The Hacker NewsMay 26, 02:35 UTC · May 26, 2022Malware1

55

Experts found 11 malicious Python packages in the PyPI repository

Security AffairsNov 21, 18:53 UTC · Nov 21, 2021Malware

30

Malicious Python packages found on PyPI

Help Net SecurityJul 18, 00:00 UTC · Jul 18, 2019Malware

42

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

The Hacker NewsMay 25, 05:59 UTC · May 25, 2026Malware

42

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

The Hacker NewsJan 28, 12:14 UTC · Jan 28, 2026Malware

42

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

The Hacker NewsSep 18, 11:38 UTC · Sep 18, 2025Malware1

42

PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2025Malware1

42

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

The Hacker NewsFeb 27, 07:04 UTC · Feb 27, 2025Malware

42

Malicious npm and PyPI target Solana Private keys to steal funds from victims' wallets

Security AffairsJan 20, 12:32 UTC · Jan 20, 2025Malware

30

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

The Hacker NewsDec 7, 10:54 UTC · Dec 7, 2024Malware

42