The IT security company NetKnights has released version 3.13 of its multi-factor authentication software, privacyIDEA ...
Microsoft has released version 1.0 of its open-source Agent Framework, positioning it as the production-ready evolution of the project introduced in October 2025 by combining Semantic Kernel ...
Truelist releases 20+ free, open-source SDKs and framework integrations for email validation — Node, Python, React, ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
This technique can be used out-of-the-box, requiring no model training or special packaging. It is code-execution free, which ...
TeamPCP strikes again, with almost identical code to LiteLLM.
The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...
A GitHub account takeover campaign uses stolen tokens to inject malware into hundreds of Python repositories. The malicious code, part of the GlassWorm/ForceMemo campaign, targets users who clone or ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results