A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Threat actors have struck the software supply chain yet again, this time hitting the Python Package Index (PyPI) with Mini Shai-Hulud in an attempt to spread poisoned code. In the latest campaign, ...

The FBI warned that TeamPCP software supply chain attacks targeted developer tools to steal cloud credentials, SSH keys, and ...

Vienna, Austria, June 25, 2026 — digna, the European data quality and observability platform, today announced the release of digna 2026.06, introducing a new Python SDK and Docker deployment support ...

Every Python developer knows some or all of these libraries, because they’re stable, reliable, and excellent at what they do.

The Swift Package Index (SPI), a search engine for open source packages for the Swift programming language, is now part of ...

Speaking of Codex: OpenAI on Monday released a Codex Security plugin⁠ that the company says “enables out-of-the-box defensive ...

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

Beach Day API, a developer-first REST API powered by VersusMedia, today announced the launch of its real-time beach and ocean ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

With a security initiative, OpenAI competes with Anthropic's Mythos and also offers a security review service for open-source ...