Search: “PyPI”

434 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 38 Ransomware 36 Threat actor 35 Exploit / PoC 23 Phishing & fraud 15 Industry 9 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 55 low 13 info 3

PyPI maintainers alert users to email verification phishing attack

Security AffairsJul 30, 13:16 UTC · Jul 30, 2025Phishing & fraud

30

Experts warn of the first known phishing attack against PyPI

Security AffairsAug 28, 15:36 UTC · Aug 28, 2022Phishing & fraud

55

OceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI

Kaspersky SecurelistMay 5, 14:33 UTC · May 5, 2026Malware

42

PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

The Hacker NewsJul 31, 10:03 UTC · Jul 31, 2025Threat actor

45

Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack

The Hacker NewsSep 5, 09:14 UTC · Sep 5, 2024Exploit / PoC in the wild

60

PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

The Hacker NewsAug 19, 17:29 UTC · Aug 19, 2025Threat actor

60

PyPI Introduces Archival Status to Alert Users About Unmaintained Python Packages

The Hacker NewsFeb 3, 12:30 UTC · Feb 3, 2025Industry1

42

Developer account body snatchers pose risks to the software supply chain

Cisco TalosOct 4, 12:51 UTC · Oct 4, 2022Exploit / PoC

57

PyPI Repository Warns Python Project Maintainers About Ongoing Phishing Attacks

The Hacker NewsAug 26, 05:01 UTC · Aug 26, 2022Phishing & fraud

55

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open

The Hacker NewsJun 4, 10:11 UTC · Jun 4, 2025Vulnerability1

42

Python's PyPI Reveals Its Secrets

The Hacker NewsMar 7, 14:51 UTC · Mar 7, 2025Phishing & fraud

42

Python team fixes bug that allowed takeover of PyPI repository

The RecordDec 14, 00:00 UTC · Dec 14, 2022Vulnerability1

55

Malicious Package on PyPI Hides Behind Image Files, Spreads Via GitHub

Infosecurity MagazineNov 9, 17:00 UTC · Nov 9, 2022Threat actor1

45

JuiceLedger Hacker Linked to First Phishing Campaign Targeting PyPI Users

Infosecurity MagazineSep 2, 15:00 UTC · Sep 2, 2022Threat actor

57

PyPI Python Package Repository Patches Critical Supply Chain Flaw

The Hacker NewsAug 2, 10:50 UTC · Aug 2, 2021Vulnerability1

55

Malicious npm and PyPI packages Llinked to Lazarus APT fake recruiter campaign

Security AffairsFeb 15, 18:14 UTC · Feb 15, 2026Threat actor1

57

PyPI Revival Hijack Puts Thousands of Applications at Risk

Infosecurity MagazineSep 5, 17:00 UTC · Sep 5, 2024Exploit / PoC in the wild

60

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

The Hacker NewsAug 11, 10:01 UTC · Aug 11, 2024Malware

42

PyPI halted new users and projects while it fended off supply

Ars Technica · SecurityMar 28, 18:50 UTC · Mar 28, 2024Malware

42

Experts found potential remote code execution in PyPI

Security AffairsAug 3, 08:27 UTC · Aug 3, 2021Vulnerability

42

Six typosquatting packages in PyPI repository laced with crypto miner

Security AffairsJun 28, 06:46 UTC · Jun 28, 2021Vulnerability

55

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

Help Net SecurityMar 27, 00:00 UTC · Mar 27, 2026Malware

42

Popular PyPI site for developers temporarily blocks functions due to malware campaign

The RecordMar 28, 19:11 UTC · Mar 28, 2024Malware

42

Experts found 3 malicious packages hiding crypto miners in PyPi repository

Security AffairsJan 4, 15:43 UTC · Jan 4, 2024Malware

55

Malicious PyPI Packages Use Compiled Python Code to Bypass Detection

Infosecurity MagazineJun 2, 16:30 UTC · Jun 2, 2023Ransomware1

57

PyPI Implements Mandatory Two

The Hacker NewsMay 31, 04:19 UTC · May 31, 2023Malware

55

PyPI temporarily suspends user sign

Security AffairsMay 21, 15:25 UTC · May 21, 2023Malware

42

Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

The Hacker NewsDec 20, 05:29 UTC · Dec 20, 2022Malware

42

10 malicious packages on PyPI used to steal developers' data

Security AffairsAug 10, 15:14 UTC · Aug 10, 2022Malware

42

New Malicious Python Libraries Found on PyPI Repository

Infosecurity MagazineAug 9, 17:30 UTC · Aug 9, 2022Malware1

55

PyPI hardens package security with new upload restrictions

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2026Vulnerability

30

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

The Hacker NewsMay 7, 09:20 UTC · May 7, 2026Malware

42

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

The Hacker NewsMar 28, 06:25 UTC · Mar 28, 2026Malware

42

Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware

The Hacker NewsFeb 6, 08:40 UTC · Feb 6, 2026Malware

42

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

The Hacker NewsAug 9, 06:49 UTC · Aug 9, 2025Vulnerability

42

PyPI Python Library "aiocpa" Found Exfiltrating Crypto Keys via Telegram Bot

The Hacker NewsNov 29, 08:53 UTC · Nov 29, 2024Malware

42

Dormant PyPI Package Compromised to Spread Nova Sentinel Malware

The Hacker NewsFeb 23, 17:08 UTC · Feb 23, 2024Malware

42

PyPI enforces 2FA to prevent maintainers' account takeover

Security AffairsMay 30, 17:37 UTC · May 30, 2023Malware

42

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

The Hacker NewsMay 23, 06:19 UTC · May 23, 2023Malware

42

W4SP Stealer Discovered in Multiple PyPI Packages Under Various Names

The Hacker NewsDec 30, 05:06 UTC · Dec 30, 2022Malware1

42