Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
On April 30, two releases of one of the most popular machine learning libraries on the Python Package Index were caught ...
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
The open-source package elementary-data, with over a million downloads per month, has been compromised. Attackers exploited a vulnerability in a GitHub ...
An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...
This was not a case of stolen credentials, but rather of vulnerability exploitation.
Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
April 2026 TIOBE Index shows Python still leading, C strengthening in second, and Rust sliding to #16, suggesting its climb may be leveling off.
Python remains on top despite another dip; C gains ground in second place, and April keeps the same top 10 order, with SQL, R, and Delphi holding steady. April’s TIOBE Index keeps the same cast in the ...