Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

TeamPCP hackers compromised the Telnyx package on the Python Package Index today, uploading malicious versions that deliver ...

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...

Supply chain attacks feel like they're becoming more and more common.

A phishing campaign targeting healthcare, government, hospitality, and education sectors uses several evasion techniques to ...

Overview Each tool serves different needs, from simplicity to speed and SQL-based analytics workflows.Performance differences ...

You can now run LLMs for software development on consumer-grade PCs. But we’re still a ways off from having Claude at home.

Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and ...

OpenAI has agreed to acquire Astral, a startup behind widely used Python development tools, in a deal designed to sharpen its ...

GlassWorm attack uses stolen GitHub tokens to inject malware into Python repositories, exposing developers to supply chain ...

Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...

Threat group TeamPCP exploited credentials stolen in the Trivy breach to push malicious versions of LiteLLM to PyPI, exposing ...