Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.

A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler.

A new ClickFix attack that leverages a Nuitka loader targets macOS users with the Python-based Infiniti Stealer malware.

My reliable, low-friction self-hosted AI productivity setup.

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

Cloudflare’s Dynamic Workers aim to simplify how enterprises execute AI-generated code, signaling a shift toward lightweight, ...

Two versions of LiteLLM, an open source interface for accessing multiple large language models, have been removed from the ...

A phishing campaign targeting healthcare, government, hospitality, and education sectors uses several evasion techniques to ...

UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were ...

Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.

Use Playerctl, Python, and Conky timer to create a 'now playing' Spotify desktop widget.