Back
Platform
PyPI
Related CVEs
Recent activity
Malware Spread via Fake Polymarket Trading Bot Targets DeFi DevelopersOn July 1, 2026, security firm SlowMist identified a fake trading bot on GitHub designed to spread malware targeting Polymarket users and DeFi developers. The bot, named 'polymarke…Go Malware Campaign Targets Terraform Providers and Go ModulesCybersecurity researchers have identified a Go-based malware campaign utilizing malicious Terraform providers and Go Modules. The campaign marks the first known instance of malware…Microsoft Alerts on npm Malware Targeting Cryptocurrency WalletsMicrosoft's Threat Intelligence unit has issued a warning about a cyber campaign targeting cryptocurrency investors and software developers through compromised npm packages. The ma…LiteLLM Supply Chain Attack Exposes Critical CredentialsOn March 24, 2026, two versions of the LiteLLM Python package (1.82.7 and 1.82.8) were compromised on PyPI, embedding credential-stealing payloads. The attack, linked to the TeamPC…TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain AttackThe TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to conta…Critical PHP Vulnerabilities Exploited During Cybersecurity Black WeekDuring the week leading up to October 25, 2026, multiple critical vulnerabilities were disclosed, including PHP2Shell, which consists of two memory-safety flaws (CVE-2026-109618 an…PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency PatchesTwo critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, allowing unauthenticated remote code execution (RCE). The v…Critical SQL Injection Zero-Day in Arista VeloCloud Orchestrator Actively ExploitedArista Networks has patched a critical SQL injection vulnerability, CVE-2026-114625, in its VeloCloud Orchestrator (VCO) that allows authenticated users to escalate privileges to s…House Democrats Demand Testimony from AI CEOs Over Cybersecurity BreachesHouse Democrats have formally requested that the CEOs of OpenAI and Anthropic testify under oath regarding AI containment failures that led to breaches affecting at least five orga…