Red Hat on Friday released an "urgent security alert" warning that two versions of a popular data compression library called XZ Utils (previously LZMA...
The Python Package Index (PyPI) repository temporarily suspended new user sign-ups due to an influx of malicious projects uploaded as part of a typosquatting...
There has been a sophisticated attack campaign orchestrated by unidentified adversaries impacting several individual developers and the GitHub organization account linked with Top.gg, a...
Threat hunters have uncovered a collection of seven packages on the Python Package Index (PyPI) repository designed to steal BIP39 mnemonic phrases used to...
The China-linked threat actor known as Evasive Panda has been behind watering hole and supply chain attacks targeting Tibetan users since at least September...