Search: “PyPI”

249 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 38 Ransomware 36 Threat actor 35 Exploit / PoC 23 AI safety & security 23 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Tools 2 Research 2 AI research 1

SeverityAll critical 114 high 250 medium 76 low 13 info 10

TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise

Infosecurity MagazineMar 25, 12:00 UTC · Mar 25, 2026Threat actor1

57

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

The Hacker NewsJan 28, 12:14 UTC · Jan 28, 2026Malware

42

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

The Hacker NewsSep 18, 11:38 UTC · Sep 18, 2025Malware1

42

PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2025Malware1

42

Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Threat actor

57

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2025Vulnerability

42

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

The Hacker NewsFeb 27, 07:04 UTC · Feb 27, 2025Malware

42

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

The Hacker NewsDec 7, 10:54 UTC · Dec 7, 2024Malware

42

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

The Hacker NewsOct 2, 05:31 UTC · Oct 2, 2024Threat actor

57

Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets

The Hacker NewsMar 12, 15:56 UTC · Mar 12, 2024Malware

42

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

The Hacker NewsSep 5, 13:56 UTC · Sep 5, 2023Malware1

42

VMConnect: Python PyPI Threat Imitates Popular Modules

Infosecurity MagazineAug 4, 17:00 UTC · Aug 4, 2023Ransomware

57

Python Developers Beware: Clipper Malware Found in 450+ PyPI Packages!

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2023Malware

42

Python packages caught attempting to steal Discord tokens, credit card numbers

The RecordDec 14, 00:00 UTC · Dec 14, 2022Vulnerability

42

Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

The Hacker NewsJan 24, 08:06 UTC · Jan 24, 2026Malware

42

AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2025Vulnerability in the wild1

57

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

The Hacker NewsAug 19, 04:18 UTC · Aug 19, 2025Exploit / PoC1

57

Malicious Machine Learning Model Attack Discovered on PyPI

Infosecurity MagazineMay 27, 14:00 UTC · May 27, 2025Malware

42

New Malware on PyPI Poses Threat to Open

Infosecurity MagazineMay 19, 16:45 UTC · May 19, 2025Malware

42

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

The Hacker NewsMay 7, 07:37 UTC · May 7, 2025Malware

42

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

The Hacker NewsApr 7, 06:40 UTC · Apr 7, 2025Malware

42

Compromised AI Library Delivers Cryptocurrency Miner via PyPI

Infosecurity MagazineDec 9, 16:30 UTC · Dec 9, 2024Vulnerability

42

New Malicious PyPI Packages Caught Using Covert Side

The Hacker NewsFeb 20, 13:49 UTC · Feb 20, 2024Malware

42

116 Malware Packages Found on PyPI Repository Infecting Windows and Linux Systems

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2023Malware

42

27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT Experts

The Hacker NewsNov 17, 12:15 UTC · Nov 17, 2023Malware

42

Labyrinth Chollima behind PyPI supply chain attacks

Security AffairsSep 1, 11:36 UTC · Sep 1, 2023Malware

42

Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPI

The Hacker NewsMar 6, 07:41 UTC · Mar 6, 2023Malware

42

Researchers Uncover Obfuscated Malicious Code in PyPI Python Packages

The Hacker NewsFeb 11, 10:33 UTC · Feb 11, 2023Exploit / PoC1

57

Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems

The Hacker NewsJan 17, 09:38 UTC · Jan 17, 2023Malware

42

PyTorch Machine Learning Framework Compromised with Malicious Dependency

The Hacker NewsJan 5, 05:00 UTC · Jan 5, 2023Data breach1

57

Researchers Uncover PyPI Package Hiding Malicious Code Behind Image File

The Hacker NewsNov 10, 12:44 UTC · Nov 10, 2022Threat actor

57

Researchers Uncover 29 Malicious PyPI Packages Targeted Developers with W4SP Stealer

The Hacker NewsNov 5, 08:35 UTC · Nov 5, 2022Malware

42

Warning: PyPI Feature Executes Code Automatically After Python Package Download

The Hacker NewsSep 11, 04:06 UTC · Sep 11, 2022Vulnerability1

42

N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust

The Hacker NewsApr 8, 07:47 UTC · Apr 8, 2026Malware1

42

Malicious LiteLLM versions linked to TeamPCP supply chain attack

Security AffairsMar 25, 08:50 UTC · Mar 25, 2026Data breach

57

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Data breach1

57

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

The Hacker NewsOct 2, 13:07 UTC · Oct 2, 2025Malware

42

Chinese AI Villager Pen Testing Tool Hits 11,000 PyPI Downloads

Infosecurity MagazineSep 16, 16:00 UTC · Sep 16, 2025Malware in the wild

57

This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC Transactions

The Hacker NewsMar 7, 09:51 UTC · Mar 7, 2025Data breach

57

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

The Hacker NewsJul 27, 05:47 UTC · Jul 27, 2024Malware

42