Search: “PyPI”

453 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 37 Ransomware 36 Threat actor 35 AI safety & security 23 Exploit / PoC 23 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 75 low 13 info 10

Anthropic says its AI hacked real

The RecordJul 31, 12:16 UTC · Jul 31, 2026Data breach in the wild

60

Anthropic's Claude breached three companies during security tests

Help Net SecurityJul 31, 00:00 UTC · Jul 31, 2026Data breach

45

The serpent’s tongue: Luring the Python out of its den

Cisco TalosJul 14, 10:00 UTC · Jul 14, 2026Malware1

55

N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust

The Hacker NewsApr 8, 07:47 UTC · Apr 8, 2026Malware1

42

Malicious LiteLLM versions linked to TeamPCP supply chain attack

Security AffairsMar 25, 08:50 UTC · Mar 25, 2026Data breach

57

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Data breach1

57

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

The Hacker NewsOct 2, 13:07 UTC · Oct 2, 2025Malware

42

Chinese AI Villager Pen Testing Tool Hits 11,000 PyPI Downloads

Infosecurity MagazineSep 16, 16:00 UTC · Sep 16, 2025Malware in the wild

57

This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC Transactions

The Hacker NewsMar 7, 09:51 UTC · Mar 7, 2025Data breach

57

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

The Hacker NewsDec 24, 13:22 UTC · Dec 24, 2024Malware

30

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

The Hacker NewsJul 27, 05:47 UTC · Jul 27, 2024Malware

42

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2024Exploit / PoC in the wild1

60

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top

The Hacker NewsMar 26, 03:55 UTC · Mar 26, 2024Malware1

42

Lazarus Exploits Typos to Sneak PyPI Malware into Dev Systems

The Hacker NewsFeb 29, 10:58 UTC · Feb 29, 2024Malware

30

Beware: 3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners

The Hacker NewsJan 6, 06:24 UTC · Jan 6, 2024Malware

30

Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

The Hacker NewsNov 9, 04:36 UTC · Nov 9, 2023Malware

42

Malicious PyPI packages drop ransomware, fileless malware

Help Net SecurityJun 5, 12:37 UTC · Jun 5, 2023Ransomware

57

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

The Hacker NewsJun 3, 05:06 UTC · Jun 3, 2023Malware1

42

Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through Firewalls

The Hacker NewsJan 9, 08:47 UTC · Jan 9, 2023Malware

42

Week in review: Windows EoP flaw still exploitable, GoDaddy breach, malicious Python packages on PyPI

Help Net SecurityNov 28, 00:00 UTC · Nov 28, 2021Ransomware CVE-2021-413791

60

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

The Hacker NewsJun 19, 15:30 UTC · Jun 19, 2026Exploit / PoC CVE-2026-26030 CVE-2026-255921

60

Open-source security group pulls out of U.S. grant, citing DEI restrictions

CyberScoopOct 29, 20:55 UTC · Oct 29, 2025Exploit / PoC in the wild1

60

Malicious Python Package uses Unicode to evade detection

Security AffairsMar 27, 07:05 UTC · Mar 27, 2023Malware1

42

Hundreds of Malicious Packages Found in npm Registry

Infosecurity MagazineJan 19, 09:30 UTC · Jan 19, 2023Malware

42

PyTorch compromised to demonstrate dependency confusion attack on Python environments

Security AffairsJan 2, 18:57 UTC · Jan 2, 2023Vulnerability1

42

Pypi Phishing

Help Net SecurityAug 25, 00:00 UTC · Aug 25, 2022Industry

30

Two malicious Python libraries were stealing SSH and GPG keys

Security AffairsDec 4, 15:37 UTC · Dec 4, 2019Malware

30

Mini Shai

Infosecurity MagazineMay 12, 14:45 UTC · May 12, 2026Vulnerability

55

TeamPCP Targets Telnyx Package in Latest Software Supply Chain Attack

Infosecurity MagazineMar 27, 15:06 UTC · Mar 27, 2026Ransomware

57

An AI gateway designed to steal your data

Kaspersky SecurelistMar 27, 13:36 UTC · Mar 27, 2026Malware

42

Anthropic backs Python Software Foundation security work with $1.5 million

Help Net SecurityJan 14, 00:00 UTC · Jan 14, 2026Malware1

42

Legacy Python Bootstrap Scripts Create Domain

The Hacker NewsDec 1, 04:21 UTC · Dec 1, 2025Vulnerability CVE-2023-453111

47

Malicious MCP servers used in supply chain attacks

Kaspersky SecurelistSep 15, 10:00 UTC · Sep 15, 2025AI safety & security

30

GhostAction Supply Chain Attack Compromises 3000+ Secrets

Infosecurity MagazineSep 8, 11:00 UTC · Sep 8, 2025Threat actor

57

Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names

The Hacker NewsAug 29, 03:58 UTC · Aug 29, 2025Ransomware1

57

Ultralytics Supply-Chain Attack

Schneier on SecurityDec 15, 00:00 UTC · Dec 15, 2024Malware

42

Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

The Hacker NewsAug 3, 03:47 UTC · Aug 3, 2024Vulnerability1

42

Developers can’t seem to stop exposing credentials in publicly accessible code

Ars Technica · SecurityNov 15, 00:00 UTC · Nov 15, 2023AI tools & infra1

30

Experts discover +451 clipper malware

Security AffairsFeb 14, 15:37 UTC · Feb 14, 2023Malware

30

Malicious npm packages caught stealing Discord tokens, environment variables

The RecordDec 21, 00:00 UTC · Dec 21, 2022Vulnerability

30