A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.

On April 30, two releases of one of the most popular machine learning libraries on the Python Package Index were caught ...

The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...

Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.

Runpod, the AI developer cloud, today announced the general availability of Runpod Flash, an open-source Python SDK that removes the infrastructure overhead between writing AI code and running it in ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

Over 1,800 developers were affected by the Mini Shai-Hulud supply chain attack that hit the PyPi, NPM, and PHP ecosystems ...

Malicious npm packages have been identified distributing malware that steals credentials and attempts to spread across ...