Search: “PyPI”

114 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 177 Vulnerability 94 Data breach 37 Ransomware 36 Threat actor 35 Exploit / PoC 23 AI safety & security 22 Phishing & fraud 15 Industry 9 AI tools & infra 4 Policy & legal 3 Research 2 Tools 2 Advisory 1

SeverityAll critical 114 high 250 medium 74 low 13 info 10

Experts warn of the first known phishing attack against PyPI

Security AffairsAug 28, 15:36 UTC · Aug 28, 2022Phishing & fraud

55

Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack

The Hacker NewsSep 5, 09:14 UTC · Sep 5, 2024Exploit / PoC in the wild

60

PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

The Hacker NewsAug 19, 17:29 UTC · Aug 19, 2025Threat actor

60

PyPI Repository Warns Python Project Maintainers About Ongoing Phishing Attacks

The Hacker NewsAug 26, 05:01 UTC · Aug 26, 2022Phishing & fraud

55

Python team fixes bug that allowed takeover of PyPI repository

The RecordDec 14, 00:00 UTC · Dec 14, 2022Vulnerability1

55

PyPI Python Package Repository Patches Critical Supply Chain Flaw

The Hacker NewsAug 2, 10:50 UTC · Aug 2, 2021Vulnerability1

55

PyPI Revival Hijack Puts Thousands of Applications at Risk

Infosecurity MagazineSep 5, 17:00 UTC · Sep 5, 2024Exploit / PoC in the wild

60

Six typosquatting packages in PyPI repository laced with crypto miner

Security AffairsJun 28, 06:46 UTC · Jun 28, 2021Vulnerability

55

Experts found 3 malicious packages hiding crypto miners in PyPi repository

Security AffairsJan 4, 15:43 UTC · Jan 4, 2024Malware

55

PyPI Implements Mandatory Two

The Hacker NewsMay 31, 04:19 UTC · May 31, 2023Malware

55

New Malicious Python Libraries Found on PyPI Repository

Infosecurity MagazineAug 9, 17:30 UTC · Aug 9, 2022Malware1

55

JuiceLedger Hackers Behind the Recent Phishing Attacks Against PyPI Users

The Hacker NewsSep 5, 06:22 UTC · Sep 5, 2022Phishing & fraud

55

PyPI Repository Enforces 2FA for Critical Python Projects

Infosecurity MagazineJul 11, 16:05 UTC · Jul 11, 2022Industry1

55

PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects

The Hacker NewsJul 11, 05:23 UTC · Jul 11, 2022Industry1

55

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages

Help Net SecurityMar 29, 00:00 UTC · Mar 29, 2026Exploit / PoC in the wildCVE-2025-53521 CVE-2026-21992 CVE-2026-3055

60

Two Additional Malicious Python Libraries Found on PyPI Repository

Infosecurity MagazineAug 16, 17:30 UTC · Aug 16, 2022Vulnerability1

55

Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys

The Hacker NewsMay 26, 02:35 UTC · May 26, 2022Malware1

55

⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-21590 CVE-2025-24983 CVE-2025-24984+27 CVEs1

60

GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages

The Hacker NewsApr 22, 14:06 UTC · Apr 22, 2025Vulnerability

55

Malicious PyPI Package Exposes Crypto Wallets to Infostealer Code

Infosecurity MagazineNov 28, 17:15 UTC · Nov 28, 2024Malware

55

PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python Libraries

The Hacker NewsNov 23, 06:39 UTC · Nov 23, 2024Malware1

55

Software supply chain attacks are getting easier

Help Net SecurityJan 24, 00:00 UTC · Jan 24, 2024Malware

55

Week in review: RCE bug in GitLab patched, phishing PyPI users, Escanor malware in MS Office docs

Help Net SecurityAug 28, 00:00 UTC · Aug 28, 2022Vulnerability CVE-2022-2884

60

Newly Uncovered PyPI Package Drops Fileless Cryptominer to Linux Systems

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2022Malware

55

10 Credential Stealing Python Libraries Found on PyPI Repository

The Hacker NewsAug 10, 05:22 UTC · Aug 10, 2022Malware

55

Anthropic says its AI hacked real

The RecordJul 31, 12:16 UTC · Jul 31, 2026Data breach in the wild

60

The serpent’s tongue: Luring the Python out of its den

Cisco TalosJul 14, 10:00 UTC · Jul 14, 2026Malware1

55

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2024Exploit / PoC in the wild1

60

Open-source security group pulls out of U.S. grant, citing DEI restrictions

CyberScoopOct 29, 20:55 UTC · Oct 29, 2025Exploit / PoC in the wild1

60

Mini Shai

Infosecurity MagazineMay 12, 14:45 UTC · May 12, 2026Vulnerability

55

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

The Hacker NewsAug 5, 07:53 UTC · Aug 5, 2026Malware

55

How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers

The Hacker NewsApr 8, 10:59 UTC · Apr 8, 2026Vulnerability1

55

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

The Hacker NewsNov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034 CVE-2025-64446 CVE-2025-13223+12 CVEs

60

Webinar: How to Stop Python Supply Chain Attacks—and the Expert Tools You Need

The Hacker NewsAug 7, 15:33 UTC · Aug 7, 2025Vulnerability

55

Review of supply chain attacks in 2024 and potential disruption scenarios for 2025

Kaspersky SecurelistDec 9, 10:54 UTC · Dec 9, 2024Data breach in the wild

60

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

The Hacker NewsJul 31, 16:17 UTC · Jul 31, 2026Data breach1

60

Anthropic says its AI accidentally hacked three companies during safety tests

CyberScoopJul 31, 02:10 UTC · Jul 31, 2026Exploit / PoC in the wild1

60

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware in the wildCVE-2026-11645 CVE-2026-2441 CVE-2026-3909+23 CVEs1

60

GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

The Hacker NewsMay 20, 16:10 UTC · May 20, 2026Data breach

60