Malicious packages found to be typo-squatting in Python Package Index

Hacker uses Trojanized Python and PHP Packages to Steal AWS Keys

PyPI Implements New Security Measures to Prevent ZIP Parser Confusion Attacks

The Python Package Index (PyPI) is implementing new restrictions to safeguard Python package installers from ZIP parser confusion attacks. T

Typosquatted npm Package Delivers Windows RAT with Encrypted C2 and Registry Persistence

A malware campaign targets Windows systems via a typosquatted npm package called postcss-minify-selector-parser, disguised as the legitimate

PyPI Supply Chain Attacks Expand: New Malicious Packages Target Bioinformatics and MCP Developers

Socket Threat Research team identified a new wave of PyPI supply chain attacks (Mini Shai-Hulud, Miasma, and Hades) that has expanded beyond

TanStack NPM Packages Compromised

Glassworm Threat Actor Returns with Unicode-Based Supply Chain Attacks on GitHub, npm, and VS Code

The Glassworm threat actor has returned with a new wave of supply chain attacks using invisible Unicode characters to compromise software re