The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.
A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler.
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...
Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.
CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across ...
A phishing campaign targeting healthcare, government, hospitality, and education sectors uses several evasion techniques to ...
Use Playerctl, Python, and Conky timer to create a 'now playing' Spotify desktop widget.
AI管理ライブラリの「LiteLLM」がサプライチェーン攻撃を受け、一時的に悪意ある変更を含んだマルウェア版が配布されていたことが判明しました。LiteLLMのマルウェア版ではユーザーのSSHキーやAPIキーを盗み出すスクリプトが動作していたことも判 ...