TeamPCP hackers compromised the Telnyx package on the Python Package Index today, uploading malicious versions that deliver credential-stealing malware hidden inside a WAV file. Earlier today, the ...

A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...

Anthropic's Claude Code has surpassed 20 million GitHub commits, but 90% of output has landed in repos with fewer than two ...

Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...

Supply chain attacks feel like they're becoming more and more common.

You don't need to be a developer to build your own crypto bot. Here's how traders are doing it in 30 minutes, for free.

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...

Chainguard is expanding beyond open-source security to protect open-core software, AI agent skills, and GitHub Actions.

Security monitoring platform company Panther Labs Inc. today announced the general availability of its complete AI SOC Platform, a new security operations service where artificial intelligence agents ...

OpenAI acquires Astral, the Python toolmaker, to enhance Codex AI coding assistant as it competes with Anthropic's Claude ...

A malicious Python package masquerading as a legitimate Telegram development tool has been identified as a vehicle for remote ...

Microsoft’s geospatial data service is designed to help research projects using public satellite and sensor information.