Ever wonder why packaging a Python app and its dependencies as a single executable is such a pain? Blame it on the dynamism ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.

A critical pre-authentication SQL injection vulnerability in BerriAI’s LiteLLM Python package came under active exploitation ...

Anaconda has acquired Outerbounds, bringing together two layers of the enterprise AI ecosystem that have historically been fragmented: development environments and production orchestration.At its core ...

A widely used open-source PyPI package, elementary-data, was compromised in a targeted attack that inserted infostealer malware via a GitHub Actions vulnerability. The malicious update, version 0.23.3 ...

The ID. Polo embodies all the virtues that made the Golf great. It will likely make its way, provided customers are willing ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.