GCP’s ConfusedComposer flaw let attackers escalate privileges via PyPI packages; patched by Google on April 13.

Developers can now use Pydantic's mcp-run-python server, distributed via JSR, to allow AI agents to execute Python code with ...

sigstore is a Python tool for generating and verifying Sigstore signatures. You can use it to sign and verify Python package distributions, or anything else!

Slopsquatting and vibe coding are fueling a new wave of AI-driven cyberattacks, exposing developers to hidden risks through ...

reading and writing files in Spotfire Binary Data Format (SBDF) building Spotfire Packages (SPKs) for distributing Python interpreters and custom packages with Spotfire internal handler code for ...

Autocomplete tools may confidently suggest non-existent or insecure code. Attackers can hijack hallucinated package names by ...

Lots of snakes can detect heat, but only three families evolved true infrared targeting. Meet the most iconic predator from ...

Software sabotage is rapidly becoming a potent new weapon in the cybercriminal arsenal, augmented by the rising popularity of ...

XRP's xrpl.js library was compromised in a supply chain attack, exposing private keys. Ripple urges immediate update to ...