On April 30, two releases of one of the most popular machine learning libraries on the Python Package Index were caught ...
ZiChatBot malware spread via 3 PyPI packages in July 2025 uses Zulip APIs as C2, enabling stealthy attacks across systems ...
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a ...
This was not a case of stolen credentials, but rather of vulnerability exploitation.
An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...
PyPI is popular among Python programmers for sharing and downloading code. Since anyone can contribute to the repository, malware – sometimes posing as legitimate, popular code libraries – can appear ...
PyPI, a vital repository for open source developers, temporarily halted new project creation and new user registration following an onslaught of package uploads that executed malicious code on any ...