A Python package presented as a privacy-first shortcut to AI models has been unmasked as a supply-chain threat that quietly captures user prompts, leans on a private university service without ...

TeamPCP hackers compromised the Telnyx package on the Python Package Index today, uploading malicious versions that deliver ...

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...

An attack on the open-source library for connecting to LLMs has apparently occurred, allowing two compromised packages to ...

Two versions of LiteLLM, an open source interface for accessing multiple large language models, have been removed from the ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

MacOS 11 and Windows ROCm wheels are unavailable for 0.2.21+. This is due to build issues with llama.cpp that are not yet resolved. ROCm builds for AMD GPUs: https ...

Cybersecurity researchers have found harmful software in the official Python Package Index (PyPI) and npm package repositories, putting software supply chains at risk. The packages, called termncolor ...

Machine learning models are increasingly applied across scientific disciplines, yet their effectiveness often hinges on heuristic decisions such as data transformations, training strategies, and model ...

What is Pip? Why Do You Need It? Pip is a package manager for Python. It allows you to install and manage hundreds of Python libraries listed in the Python Package ...

A malicious package designed to steal private keys for Ethereum wallets has been uncovered within the Python Package Index (PyPI). According to Socket, this package – named ‘set-utils’ – masquerades ...