Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

A team of researchers at the University of Warwick and Monash University has solved a puzzle that has stumped drug developers ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Every Python developer knows some or all of these libraries, because they’re stable, reliable, and excellent at what they do.

Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...

Explore the leading application security tools of 2026 designed for enterprises. Understand their features, pricing models, and integration guidance for Indian and APAC businesses to enhance cyber ...

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the ...

A so-called software supply chain attack, in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively rare event but one that haunted the ...