AI-powered Villager tool reached 11,000 PyPI downloads since July 2025, enabling scalable cyberattacks and complicating ...

When attackers compromised Ultralytics YOLO, a popular real-time object detection machine-learning package for Python, most assumed the Python Package Index, or PyPI, must be the point of failure.

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

AI expertise, English language proficiency and cloud skills are among the most desired traits for ransomware gangs seeking help.

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...