A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Multiple weaponized proof-of-concept (PoC) exploits on GitHub were found delivering a Python-based remote access trojan (RAT) named ChocoPoC that can execute commands and steal sensitive data in a ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS ...

In this episode, Ray Cochrane digs into Claude Science, Anthropic's new AI workbench for researchers, and explains why its ...

Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...

3 Min Read by Alexander Culafi, Senior News Writer Application Security 'Hades' Campaign Against PyPI Puts New Spin on Shai-Hulud Jun 8, 2026 | 4 Min Read ...