Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...
The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...
Supply chain attacks feel like they're becoming more and more common.
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
Andrej Karpathy, the former Tesla AI director and OpenAI cofounder, is calling a recent Python package attack \"software ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
The new family of AI models can run on a smartphone, a Raspberry Pi, or a data centre, and is free to use commercially.
Chainguard is racing to fix trust in AI-built software - here's how ...
Build your first fully functional, Java-based AI agent using familiar Spring conventions and built-in tools from Spring AI.
Most people still use ChatGPT like Google. Learn the five-level AI framework that turns prompts into skills, automations, and ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ ...