The TeamPCP hacking group has been using credentials stolen in the recent OSS campaign to enumerate and compromise AWS ...
The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...
How I used Gemini to replace YouTube's missing comment alerts - in under an hour ...
JFrog reports Telnyx PyPI package was poisoned with malware by TeamPCP Malicious update delivered hidden .wav payload that ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
Crypto users are facing a new security threat via fake Cloudflare CAPTCHA pages. The attack installs an infostealer built to ...
Overview Recently, NSFOCUS Technology CERT detected that the GitHub community disclosed that there was a credential stealing program in the new version of LiteLLM. Analysis confirmed that it had ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
LiteLLM, a massively popular Python library, was compromised via a supply chain attack, resulting in the delivery of ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
A newly discovered attack sandbags Apple users into hacking themselves. Here’s what all Mac users need to know.