Ever wonder why packaging a Python app and its dependencies as a single executable is such a pain? Blame it on the dynamism ...

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

A critical pre-authentication SQL injection vulnerability in BerriAI’s LiteLLM Python package came under active exploitation ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

This was not a case of stolen credentials, but rather of vulnerability exploitation.

Anaconda has acquired Outerbounds, bringing together two layers of the enterprise AI ecosystem that have historically been fragmented: development environments and production orchestration.At its core ...

The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...