Search: “PyPI”

126 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 37 Ransomware 36 Threat actor 35 Exploit / PoC 23 AI safety & security 22 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 74 low 13 info 10

OceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI

Kaspersky SecurelistMay 5, 14:33 UTC · May 5, 2026Malware

42

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

The Hacker NewsAug 11, 10:01 UTC · Aug 11, 2024Malware

42

PyPI halted new users and projects while it fended off supply

Ars Technica · SecurityMar 28, 18:50 UTC · Mar 28, 2024Malware

42

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

Help Net SecurityMar 27, 00:00 UTC · Mar 27, 2026Malware

42

Popular PyPI site for developers temporarily blocks functions due to malware campaign

The RecordMar 28, 19:11 UTC · Mar 28, 2024Malware

42

PyPI temporarily suspends user sign

Security AffairsMay 21, 15:25 UTC · May 21, 2023Malware

42

Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

The Hacker NewsDec 20, 05:29 UTC · Dec 20, 2022Malware

42

10 malicious packages on PyPI used to steal developers' data

Security AffairsAug 10, 15:14 UTC · Aug 10, 2022Malware

42

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

The Hacker NewsMay 7, 09:20 UTC · May 7, 2026Malware

42

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

The Hacker NewsMar 28, 06:25 UTC · Mar 28, 2026Malware

42

Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware

The Hacker NewsFeb 6, 08:40 UTC · Feb 6, 2026Malware

42

PyPI Python Library "aiocpa" Found Exfiltrating Crypto Keys via Telegram Bot

The Hacker NewsNov 29, 08:53 UTC · Nov 29, 2024Malware

42

Dormant PyPI Package Compromised to Spread Nova Sentinel Malware

The Hacker NewsFeb 23, 17:08 UTC · Feb 23, 2024Malware

42

PyPI enforces 2FA to prevent maintainers' account takeover

Security AffairsMay 30, 17:37 UTC · May 30, 2023Malware

42

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

The Hacker NewsMay 23, 06:19 UTC · May 23, 2023Malware

42

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

The Hacker NewsDec 30, 05:06 UTC · Dec 30, 2022Malware1

42

Several Malicious Typosquatted Python Libraries Found On PyPI Repository

The Hacker NewsJul 30, 08:18 UTC · Jul 30, 2021Malware

42

Hades PyPI Attack: 19 Packages Poisoned to Auto

The Hacker NewsJun 9, 10:34 UTC · Jun 9, 2026Malware

42

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

The Hacker NewsJun 9, 16:37 UTC · Jun 9, 2025Malware

42

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

The Hacker NewsMay 20, 05:49 UTC · May 20, 2025Malware1

42

Malicious PyPI Packages Stole Cloud Tokens—Over 14,100 Downloads Before Removal

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2025Malware

42

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The Hacker NewsMar 30, 05:08 UTC · Mar 30, 2024Malware

42

Python Developers Warned of Trojanized PyPI Packages Mimicking Popular Libraries

The Hacker NewsFeb 23, 11:23 UTC · Feb 23, 2023Malware

42

Malicious PyPI package posed as SentinelOne SDK to serve info

Security AffairsDec 20, 00:59 UTC · Dec 20, 2022Malware

42

Malicious Python packages found on PyPI

Help Net SecurityJul 18, 00:00 UTC · Jul 18, 2019Malware

42

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

The Hacker NewsMay 25, 05:59 UTC · May 25, 2026Malware

42

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

The Hacker NewsJan 28, 12:14 UTC · Jan 28, 2026Malware

42

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

The Hacker NewsSep 18, 11:38 UTC · Sep 18, 2025Malware1

42

PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2025Malware1

42

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

The Hacker NewsFeb 27, 07:04 UTC · Feb 27, 2025Malware

42

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

The Hacker NewsDec 7, 10:54 UTC · Dec 7, 2024Malware

42

Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets

The Hacker NewsMar 12, 15:56 UTC · Mar 12, 2024Malware

42

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

The Hacker NewsSep 5, 13:56 UTC · Sep 5, 2023Malware1

42

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2023Malware

42

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

The Hacker NewsJan 24, 08:06 UTC · Jan 24, 2026Malware

42

Malicious Machine Learning Model Attack Discovered on PyPI

Infosecurity MagazineMay 27, 14:00 UTC · May 27, 2025Malware

42

New Malware on PyPI Poses Threat to Open

Infosecurity MagazineMay 19, 16:45 UTC · May 19, 2025Malware

42

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

The Hacker NewsMay 7, 07:37 UTC · May 7, 2025Malware

42

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

The Hacker NewsApr 7, 06:40 UTC · Apr 7, 2025Malware

42

New Malicious PyPI Packages Caught Using Covert Side

The Hacker NewsFeb 20, 13:49 UTC · Feb 20, 2024Malware

42