Search: “PyPI”

36 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 37 Ransomware 36 Threat actor 35 Exploit / PoC 23 AI safety & security 22 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 74 low 13 info 10

Malicious PyPI Packages Use Compiled Python Code to Bypass Detection

Infosecurity MagazineJun 2, 16:30 UTC · Jun 2, 2023Ransomware1

57

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

The Hacker NewsMay 1, 16:27 UTC · May 1, 2026Ransomware

57

⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-21590 CVE-2025-24983 CVE-2025-24984+27 CVEs1

60

VMConnect: Python PyPI Threat Imitates Popular Modules

Infosecurity MagazineAug 4, 17:00 UTC · Aug 4, 2023Ransomware

57

Malicious PyPI packages drop ransomware, fileless malware

Help Net SecurityJun 5, 12:37 UTC · Jun 5, 2023Ransomware

57

Week in review: Windows EoP flaw still exploitable, GoDaddy breach, malicious Python packages on PyPI

Help Net SecurityNov 28, 00:00 UTC · Nov 28, 2021Ransomware CVE-2021-413791

60

TeamPCP Targets Telnyx Package in Latest Software Supply Chain Attack

Infosecurity MagazineMar 27, 15:06 UTC · Mar 27, 2026Ransomware

57

Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names

The Hacker NewsAug 29, 03:58 UTC · Aug 29, 2025Ransomware1

57

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Ransomware CVE-2026-33634

60

TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets

Infosecurity MagazineMar 31, 12:15 UTC · Mar 31, 2026Ransomware

57

TeamPCP’s attack spree slows, but threat escalates with ransomware pivot

Help Net SecurityMar 30, 00:00 UTC · Mar 30, 2026Ransomware

57

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentials

Security AffairsJul 4, 16:08 UTC · Jul 4, 2026Ransomware CVE-2026-33634 CVE-2026-48027 CVE-2026-45321+1 CVEs

60

Grafana Labs Says Code Breach Stemmed from TanStack Attack

Infosecurity MagazineMay 21, 08:00 UTC · May 21, 2026Ransomware

57

GitHub Confirms Breach of Internal Repositories

Infosecurity MagazineMay 20, 10:45 UTC · May 20, 2026Ransomware

60

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Ransomware

57

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Ransomware

57

CISO's Expert Guide To AI Supply Chain Attacks

The Hacker NewsNov 11, 11:58 UTC · Nov 11, 2025Ransomware

60

⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit

The Hacker NewsSep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585 CVE-2025-55241 CVE-2025-10035+14 CVEs1

60

IT threat evolution Q3 2022

Kaspersky SecurelistNov 18, 08:00 UTC · Nov 18, 2022Ransomware CVE-2017-10271

60

Week in review: Cisco hacked, Kali Linux 2022.3 released, Black Hat USA 2022

Help Net SecurityAug 14, 00:00 UTC · Aug 14, 2022Ransomware in the wildCVE-2022-34713 CVE-2022-30134

60

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+43 CVEs1

60

How software development's speed obsession enabled TeamPCP’s chaos crusade

CyberScoopJun 18, 23:03 UTC · Jun 18, 2026Ransomware

57

GitHub says internal repositories were impacted in poisoned VS Code extension attack

CyberScoopMay 20, 16:59 UTC · May 20, 2026Ransomware

60

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

The Hacker NewsMay 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897 CVE-2026-20182 CVE-2026-20127

60

Great responsibility, without great power

Cisco TalosApr 30, 18:00 UTC · Apr 30, 2026Ransomware in the wildCVE-2026-42208

60

Google links Axios npm supply chain attack to North Korea

Security AffairsApr 1, 13:47 UTC · Apr 1, 2026Ransomware

57

North Korean hackers linked to Axios npm supply chain compromise

Help Net SecurityApr 1, 00:00 UTC · Apr 1, 2026Ransomware

57

Security Affairs newsletter Round 564 by Pierluigi Paganini

Security AffairsFeb 22, 14:14 UTC · Feb 22, 2026Ransomware in the wildCVE-2026-1670 CVE-2026-2441

60

Vibe-Coded Malicious VS Code Extension Found with Built

The Hacker NewsNov 7, 09:00 UTC · Nov 7, 2025Ransomware1

57

Security Affairs newsletter Round 544 by Pierluigi Paganini – INTERNATIONAL EDITION

Security AffairsOct 5, 11:35 UTC · Oct 5, 2025Ransomware in the wildCVE-2025-41244

60

Malicious VS Code Extensions Exploit Name Reuse Loophole

Infosecurity MagazineAug 28, 14:00 UTC · Aug 28, 2025Ransomware

57

Care what you share

Cisco TalosApr 17, 18:01 UTC · Apr 17, 2025Ransomware in the wild1

60

Security Affairs newsletter Round 508 by Pierluigi Paganini

Security AffairsJan 26, 14:30 UTC · Jan 26, 2025Ransomware in the wildCVE-2025-230061

60

Advanced threat predictions for 2023

Kaspersky SecurelistNov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild

60

Talos Threat Spotlights

Cisco TalosApr 14, 00:00 UTC · Apr 14, 2022Ransomware in the wildCVE-2024-45771

60

Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

The Hacker NewsOct 28, 07:05 UTC · Oct 28, 2021Ransomware

57