PyPI

Malicious PyTorch Lightning Release Exfiltrates Cloud Keys and Browser Data PyTorch Lightning 2.6.3 malware

PyTorch Lightning 2.6.3 malware

Malicious PyTorch Lightning Release Exfiltrates Cloud Keys and Browser Data

Hieu Phan Trong May 5, 2026

A compromised iteration of a widely utilized AI development tool has been identified, harboring the capability to...

Software Supply Chain Under Attack: New Malware Infiltrates PyPI & npm with Advanced Tactics slopsquatting

slopsquatting

Software Supply Chain Under Attack: New Malware Infiltrates PyPI & npm with Advanced Tactics

Do Son June 17, 2025

Amid a surge in increasingly sophisticated software supply chain attacks, cybersecurity experts have identified a new wave...

Python Developers Beware: Malicious PyPI Packages Steal Social Media Data PyPI malware

PyPI malware

Python Developers Beware: Malicious PyPI Packages Steal Social Media Data

Do Son May 22, 2025

Threat actors continue to exploit popular open-source repositories as launchpads for the distribution of malicious code. This...

Beware! Malicious Solana Tool on PyPI Stole Developer Data PyPI Malware

PyPI Malware

Beware! Malicious Solana Tool on PyPI Stole Developer Data

Do Son May 15, 2025

Threat actors uploaded a malicious package to the official PyPI repository, disguised as a legitimate tool for...

Malicious ‘discordpydebug’ Package on PyPI Steals Data with RAT CoffeeLoader PyPI malware

CoffeeLoader PyPI malware

Malicious ‘discordpydebug’ Package on PyPI Steals Data with RAT

Do Son May 9, 2025

Researchers have uncovered a malicious package in the PyPI repository, masquerading as a utility for working with...

Malicious Packages Found Destroying Data and Stealing Crypto Keys Software supply chain

Software supply chain

Malicious Packages Found Destroying Data and Stealing Crypto Keys

Do Son May 6, 2025

Three malicious components have been discovered within the Go programming module ecosystem, capable of triggering complete data...

Malicious PyPI Package Steals Crypto Exchange Trading Orders The JSON settings downloaded by the malicious package

The JSON settings downloaded by the malicious package

Malicious PyPI Package Steals Crypto Exchange Trading Orders

Do Son April 18, 2025

Researchers at JFrog have uncovered a malicious package hosted on the official Python Package Index (PyPI). Its...

PyPI Poisoned: 39K Downloads of Card-Stealing Python

PyPI Poisoned

PyPI Poisoned: 39K Downloads of Card-Stealing Python

Do Son April 8, 2025

Malicious Python libraries have once again surfaced on the PyPI platform, engineered to steal confidential data and...