Snyk finds PyPi malware that steals Discord and Roblox credential and payment info

Critical Security Alert: Malicious Credential-Stealing File Found in litellm 1.82.8 PyPI Package

The article reports a critical security vulnerability in the litellm==1.82.8 Python package on PyPI, which contains a malicious .pth file th

Hacker uses Trojanized Python and PHP Packages to Steal AWS Keys

Nx Build Kit Security Breach: Malware Steals Wallets and Credentials via GitHub Repositories

A security breach has been discovered in the popular Nx build kit where malicious post-install commands create unauthorized repositories nam

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

PyPI Supply Chain Attacks Expand: New Malicious Packages Target Bioinformatics and MCP Developers

Socket Threat Research team identified a new wave of PyPI supply chain attacks (Mini Shai-Hulud, Miasma, and Hades) that has expanded beyond

PyPI Package 'Lightning' Compromised in Supply Chain Attack Affecting AI/ML Developers

The PyPI package 'lightning', a widely-used deep learning framework, was compromised in a supply chain attack affecting versions 2.6.2 and 2