Search: “PyPI”

23 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 38 Ransomware 36 Threat actor 35 AI safety & security 23 Exploit / PoC 23 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 76 low 13 info 10

Malicious PyPI Packages Use Compiled Python Code to Bypass Detection

Infosecurity MagazineJun 2, 16:30 UTC · Jun 2, 2023Ransomware1

57

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

The Hacker NewsMay 1, 16:27 UTC · May 1, 2026Ransomware

57

VMConnect: Python PyPI Threat Imitates Popular Modules

Infosecurity MagazineAug 4, 17:00 UTC · Aug 4, 2023Ransomware

57

Malicious PyPI packages drop ransomware, fileless malware

Help Net SecurityJun 5, 12:37 UTC · Jun 5, 2023Ransomware

57

Week in review: Windows EoP flaw still exploitable, GoDaddy breach, malicious Python packages on PyPI

Help Net SecurityNov 28, 00:00 UTC · Nov 28, 2021Ransomware CVE-2021-413791

60

TeamPCP Targets Telnyx Package in Latest Software Supply Chain Attack

Infosecurity MagazineMar 27, 15:06 UTC · Mar 27, 2026Ransomware

57

Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names

The Hacker NewsAug 29, 03:58 UTC · Aug 29, 2025Ransomware1

57

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Ransomware CVE-2026-33634

60

TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets

Infosecurity MagazineMar 31, 12:15 UTC · Mar 31, 2026Ransomware

57

TeamPCP’s attack spree slows, but threat escalates with ransomware pivot

Help Net SecurityMar 30, 00:00 UTC · Mar 30, 2026Ransomware

57

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentials

Security AffairsJul 4, 16:08 UTC · Jul 4, 2026Ransomware CVE-2026-33634 CVE-2026-48027 CVE-2026-45321+1 CVEs

60

Grafana Labs Says Code Breach Stemmed from TanStack Attack

Infosecurity MagazineMay 21, 08:00 UTC · May 21, 2026Ransomware

57

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Ransomware

57

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Ransomware

57

IT threat evolution Q3 2022

Kaspersky SecurelistNov 18, 08:00 UTC · Nov 18, 2022Ransomware CVE-2017-10271

60

How software development's speed obsession enabled TeamPCP’s chaos crusade

CyberScoopJun 18, 23:03 UTC · Jun 18, 2026Ransomware1

57

Google links Axios npm supply chain attack to North Korea

Security AffairsApr 1, 13:47 UTC · Apr 1, 2026Ransomware

57

North Korean hackers linked to Axios npm supply chain compromise

Help Net SecurityApr 1, 00:00 UTC · Apr 1, 2026Ransomware

57

Vibe-Coded Malicious VS Code Extension Found with Built

The Hacker NewsNov 7, 09:00 UTC · Nov 7, 2025Ransomware1

57

Malicious VS Code Extensions Exploit Name Reuse Loophole

Infosecurity MagazineAug 28, 14:00 UTC · Aug 28, 2025Ransomware1

57

Care what you share

Cisco TalosApr 17, 18:01 UTC · Apr 17, 2025Ransomware in the wild1

60

Talos Threat Spotlights

Cisco TalosApr 14, 00:00 UTC · Apr 14, 2022Ransomware in the wildCVE-2024-45771

60

Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

The Hacker NewsOct 28, 07:05 UTC · Oct 28, 2021Ransomware

57