Compromised dYdX npm and PyPI packages delivered wallet-stealing malware and a RAT via poisoned updates in a software supply chain attack.

Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.

Security researchers uncovered two vulnerabilities in the popular Python-based AI app building tool that could allow attackers to extract credentials and files — and gain a lateral edge.

With the PyArrow library installed, pandas 3.0 interprets string columns automatically as the str data type instead of NumPy- ...

A report from ReversingLabs reveals a massive 73% increase in malicious open-source packages in 2025, with over 10,000 ...

Open source malware surged 73% in 2025, with npm as a key target with rising risks in software supply chains and developer environments.

A new open source tool called EpsteIn (Epstein + LinkedIn) lets users check whether their LinkedIn connections appear in ...

Stranger Things concept of the “Upside Down” is a useful way to think about the risks lurking in the software we all rely on.

As artificial intelligence continues to reshape industries at an unprecedented pace, venture capitalists face a critical ...

Baron Funds, an investment management company, released its “Baron Discovery Fund” fourth-quarter 2025 investor letter. A ...

The evidence backs him up. Data from a Google Cloud study published five months ago shows that 97% of developers believe generative AI is reshaping the industry. Meanwhile, gaming revenues hit $189 ...

Elizabeth Turk’s “flash art” event on Jan. 31 will have people moving and dancing beneath 2,000 illuminated umbrellas.