The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows ...

Ever wonder why packaging a Python app and its dependencies as a single executable is such a pain? Blame it on the dynamism ...

A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...

ESP-Claw turns your ESP32 into a full fledged AI agent, with web search and Telegram support.

ZiChatBot malware spread via 3 PyPI packages in July 2025 uses Zulip APIs as C2, enabling stealthy attacks across systems ...

A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...