Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

Better way to master Python.

The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.

Engineers from OLX reported that a single-line modification to dependency requirements allows developers to exclude unnecessary GPU libraries, shrinking contain ...

TeamPCP strikes again, with almost identical code to LiteLLM.

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

Mark Collier briefed me on two updates under embargo at KubeCon Europe 2026 last month: Helion, which opens up GPU kernel ...

DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.

LangChain and LangGraph have patched three high-severity and critical bugs.

Integrated into platforms like Proton Docs or OpenProject, the Euro-Office component enables real-time editing of documents, spreadsheets, and presentation files while supporting multiple formats.

Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked maintainer account is behind the ...