Search: “PyPI”

177 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 38 Ransomware 36 Threat actor 35 AI safety & security 23 Exploit / PoC 23 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 76 low 13 info 10

Iraq-based cybercriminals deploy malicious Python packages to steal data

The RecordJul 17, 12:40 UTC · Jul 17, 2024Malware1

30

Cybercriminals Abuse Stack Overflow to Promote Malicious Python Package

The Hacker NewsJun 11, 06:06 UTC · Jun 11, 2024Malware1

42

Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

The Hacker NewsMay 15, 00:00 UTC · May 15, 2024Malware

42

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2023Malware

42

Python Package Index Targeted Again By VMConnect

Infosecurity MagazineSep 4, 17:30 UTC · Sep 4, 2023Malware

42

Tool to find the Operation Triangulation traces

Kaspersky SecurelistJun 2, 12:16 UTC · Jun 2, 2023Malware

42

Researchers Uncover 7000 Malicious Open Source Packages

Infosecurity MagazineApr 12, 10:30 UTC · Apr 12, 2023Malware

42

Malicious Npm Package Uses Typosquatting, Downloads Malware

Infosecurity MagazineFeb 10, 16:00 UTC · Feb 10, 2023Malware

42

Ongoing supply chain attack targets Python developers with WASP Stealer

Security AffairsNov 18, 08:24 UTC · Nov 18, 2022Malware1

42

Over 200 Malicious NPM Packages Caught Targeting Azure Developers

The Hacker NewsMar 25, 06:27 UTC · Mar 25, 2022Malware

42

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

Malicious AI agent skills can slip past the scanners built to stop them

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2026Malware

42

⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

The Hacker NewsJun 10, 04:47 UTC · Jun 10, 2026Malware in the wildCVE-2025-6543 CVE-2025-5777 CVE-2025-49825+23 CVEs

60

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Ars Technica · SecurityJun 8, 18:34 UTC · Jun 8, 2026Malware

42

Red Hat npm packages compromised in new Mini Shai-Hulud malware wave

Help Net SecurityJun 2, 00:00 UTC · Jun 2, 2026Malware

42

How cybersecurity firms took down Glassworm botnet in one shot

Security AffairsMay 27, 11:35 UTC · May 27, 2026Malware

42

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42

GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

The Hacker NewsMar 25, 16:42 UTC · Mar 25, 2026Malware

30

Open-source tool Sage puts a security layer between AI agents and the OS

Help Net SecurityMar 9, 00:00 UTC · Mar 9, 2026Malware

42

Fraud Investigation Reveals Sophisticated Python Malware

Infosecurity MagazineFeb 23, 15:30 UTC · Feb 23, 2026Malware

30

⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

The Hacker NewsFeb 9, 12:59 UTC · Feb 9, 2026Malware CVE-2026-25049 CVE-2026-0709 CVE-2026-23795+23 CVEs1

60

Malicious npm Packages Exploit Ethereum Smart Contracts

Infosecurity MagazineSep 3, 15:45 UTC · Sep 3, 2025Malware

42

The Solidity Language open-source package was used in a $500,000 crypto heist

Kaspersky SecurelistJul 10, 11:00 UTC · Jul 10, 2025Malware

42

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

The Hacker NewsJul 10, 10:33 UTC · Jul 10, 2025Malware1

42

Open source has a malware problem, and it's getting worse

Help Net SecurityJul 10, 00:00 UTC · Jul 10, 2025Malware

30

Malicious Open Source Packages Surge 188% Annually

Infosecurity MagazineJul 8, 11:00 UTC · Jul 8, 2025Malware

55

200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

The Hacker NewsJun 21, 09:10 UTC · Jun 21, 2025Malware

42

Malicious Go Modules designed to wipe Linux systems

Security AffairsMay 4, 15:09 UTC · May 4, 2025Malware

42

Stealers and backdoors are spreading under the guise of a DeepSeek client

Kaspersky SecurelistMar 6, 10:00 UTC · Mar 6, 2025Malware

42

Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT

The Hacker NewsJan 3, 04:52 UTC · Jan 3, 2025Malware1

42

Cryptomining Malware Found in Popular Open Source Packages

Infosecurity MagazineDec 23, 16:30 UTC · Dec 23, 2024Malware

55

Open source malware up 200% since 2023

Help Net SecurityDec 11, 00:00 UTC · Dec 11, 2024Malware

42

North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware

The Hacker NewsSep 19, 09:24 UTC · Sep 19, 2024Malware

42

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The Hacker NewsSep 9, 12:05 UTC · Sep 9, 2024Malware1

42

Malware report for Q2 2024 — a quarterly review

Kaspersky SecurelistSep 5, 07:45 UTC · Sep 5, 2024Malware CVE-2024-3094

60

Here’s how carefully concealed backdoor in fake AWS files escaped mainstream notice

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2024Malware

55

Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories

The Hacker NewsJul 9, 04:48 UTC · Jul 9, 2024Malware

42

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

The Hacker NewsJul 9, 04:22 UTC · Jul 9, 2024Malware

42

Kaspersky analysis of the backdoor in XZ

Kaspersky SecurelistApr 12, 08:00 UTC · Apr 12, 2024Malware

42

Hugging Face, the GitHub of AI, hosted code that backdoored user devices

Ars Technica · SecurityMar 1, 18:02 UTC · Mar 1, 2024Malware

42