These are my go-to libraries for Python data crunching.

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files on compromised servers. At ...

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

This photograph shows a screen during the 18th edition of the "InCyber" Forum, an international cyber security event, at the Grand Palais in Lille, northern France on April 1, 2026. The forum, which ...

Vienna, Austria, June 25, 2026 — digna, the European data quality and observability platform, today announced the release of digna 2026.06, introducing a new Python SDK and Docker deployment support ...

Connect all your configuration files and autogenerate code—Jsonnet is the missing piece for large code bases.

Kilo grew from zero to over 3 million developers in sixteen months because developers recommended it to other developers, drawn to its open source roots and the seamless access to the latest AI models ...