PyPI quarantined the trojanized version of the popular open source AI gateway within hours, and the Docker image (litellm/litellm:1.107.0) was removed from both Docker Hub and GHCR soon after - but ...

Attackers replaced OVHcloud CLI downloads across five GitHub releases with secret-stealing builds for up to 94 minutes on ...

Hackers used AI-generated code to target government Linux servers, steal credentials, access emails and databases and evade ...

Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns, ...

Software supply chain security company Chainguard has announced two beta products for running and testing code written by ...

A reported cyberespionage campaign has targeted government Linux infrastructure with custom malware, web shells, and credential-theft capabilities, according to the original Unit 42-indexed item.

We're a long way from Kali Linux here, Toto. Grayware - software that behaves like malware without being technically malicious - is now blocked by default across Chainguard’s stack. There's a lot to ...

Hackers exploit ClickFix to deploy malware loaders and Python tunnels on Windows, potentially enabling ransomware attacks.

AI agents escaping security boundaries, compromising production systems and spreading malware through software supply chains emerged as major threats in a roundup of AI-related security incidents ...

Secure software supply chain solution provider Chainguard Inc. today unveiled a vulnerability-hunting service that uses ...

An AI coding agent can write a useful fix and still create a security incident along the way. It may install a compromised ...

Zscaler ThreatLabz has uncovered a July 2026 campaign that hides malware in a trojanized Terraform provider. It targets ...