A widely used open-source PyPI package, elementary-data, was compromised in a targeted attack that inserted infostealer malware via a GitHub Actions vulnerability. The malicious update, version 0.23.3 ...
3hon MSN
Top open source PyPI package with over 1 million downloads each month hacked to send out malware
This was not a case of stolen credentials, but rather of vulnerability exploitation.
A widely used Python package has been compromised in a supply chain attack. The package, elementary-data, has over one ...
The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...
Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...
CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
14d
Do not fall for this fake Windows update support site. It’s spreading a password-stealing malware
Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...
The new family of AI models can run on a smartphone, a Raspberry Pi, or a data centre, and is free to use commercially.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results