exhibits indicators of malicious activity read more about Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

serves as a downloader read more about SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

other services and private information read more about GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages

Japan's Computer Security Incident Response Team (JPCERT/CC) is warning that the notorious North Korean hacking group Lazarus has uploaded four malicious PyPI packages to infect developers with malwar...

Researchers have discovered that threat actors have been using open-source platforms and codes for several purposes, such as hosting C2 infrastructure, storing stolen data, and delivering second and t...

In order to evade detection read more about Malicious PyPI Package Impersonates SymPy Deploys XMRig Miner on Linux Hosts