According to researchers at cybersecurity companies Sekoia and YesWeHack, the packages are hosted on the Python Package Index (PyPI), a platform used by Python developers to source and share code.

A new report reveals that AI agents can autonomously execute ransomware attacks, evidenced by the case of JADEPUFFER, which ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Meta's new Pocket app lets users create and share interactive mini-games using plain text prompts, making vibe coding ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

The AI-assisted editor now works alongside the platform's MCP server and interactive documentation, giving developers plain-language code generation, debugging, and reference lookup across a single ...

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

The only way I'd ever let AI read my mail ...

The offshore software company is training all of its Philippine-based engineers on AI development tools through its Spartan Training Academy ...

Crypto exchange choices are difficult; platforms claim the best fees, tokens, and safety. MEXC, active since 2018, grows ...