python
Hades-Themed “Mini Shai-Hulud” Worm Hits PyPI in Latest Open Source Supply Chain Attack
What happened Threat actors have launched a new wave of supply chain attacks against the Python Package Index (PyPI), distributing malicious packages as part of an evolving campaign linked to the Shai-Hulud ...
Malicious PyTorch Lightning Packages Found on PyPI
TL;DR Two malicious versions of the popular PyTorch Lightning package have been uploaded to PyPI following the publisher account’s compromise. Lightning versions 2.6.2 and 2.6.3 (tracked as sonatype-2026-002817) were published on April ...
Compromised litellm PyPI Package Delivers Multi-Stage Credential Stealer
This morning, the widely used Python package litellm, a popular abstraction layer for interacting with large language models (LLMs), was compromised and two malicious versions released (1.82.7 and 1.82.8) ...
Arcjet Python SDK Sinks Teeth Into Application-Layer Security
A new Arcjet SDK lets Python teams embed bot protection, rate limiting, and abuse prevention directly into application code ...
Text Detection and Extraction From Images Using OCR in Python
Learn how to detect and extract text from images and scanned files using Python and OCR. Step-by-step guide for developers and automation enthusiasts ...
Insights from the DeepSeek Malicious Software Package Incident: Why Software Supply Chain Security Matters in Global AI Technology Competition
Background With the widespread application of AI technology, software supply chains are facing more complex and diverse security threats. Since January 2025, DeepSeek, as an emerging force in China’s AI industry, has ...
Critical OpenWrt Bug: Update Your Gear!
ASU 48-bit trash hash: Open source router firmware project fixes dusty old code ...
Defending Against Email Attachment Scams
One of the most alarming methods of attack involves intercepting email attachments during transit, resulting in the theft of personally identifiable information (PII) and other sensitive data ...
OpenSSH regreSSHion Vulnerability
…and…How AI Can Revolutionize Code and Regression Testing Introduction Artificial Intelligence (AI) is transforming numerous industries, and software development is no exception. One of the critical areas where AI can make a ...
Malicious PyPI Package ‘Pytoileur’ Targets Windows and Leverages Stack Overflow for Distribution
Another day, another PyPI malware package. But this one has a new way to (try to) sneak into your computer ...
