Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft - MicrosoftMini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft Microsoft
Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account - SnykMini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account Snyk
Figure AI had one of its robots race an intern to sort packages. See who lost.Figure AI's intern outperformed a humanoid robot in a package sorting contest, highlighting the challenges in robotics automation.
Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack - StepSecurityMicrosoft's durabletask PyPI Package Compromised in Supply Chain Attack StepSecurity
OceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI - SecurelistOceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI Securelist
PyTorch Lightning Compromised With Two Malicious Package Versions Published - SonatypePyTorch Lightning Compromised With Two Malicious Package Versions Published Sonatype
Ask HN: Package RegistryI've been migrating off-of GitHub and noticed that codeberg does not allow you to set visibility on packages per-repository or even per-package.If your org is public, then so are all packages you publish. If you set this org to private, you cannot have any public projects.I could technically create two orgs, but I would prefer keeping everything under one.This leaves me with the following options:- host my own registry (registry:2 or harbor seem popular, but I am afraid of the traffic it might bring. I could throw it under tailscale, though.)- Keep these pacakges on the GHCR registry, although that doesn't seem like a good long-term solutionWhat's you guys' experience with this? I don't mind self-hosting things, but setting these up seems like a big chore. I already have forgejo runners, because this was easy to set-up in docker+dind (yes, this isnt very secure, but the box its running on has nothing sensitive).
Popular lightning PyPI Package Backdoored in Latest Shai-Hulud Wave - Endor LabsPopular lightning PyPI Package Backdoored in Latest Shai-Hulud Wave Endor Labs
Show HN: I built a PyPI watchdog that tests whether packages workThe Python Package Index now curates over 700,000 packages. 10,000-15,000 are added daily. Nobody systematically checks whether they install and run across environments. I built something that does.The watchdog pulls packages, attempts installs across multiple Python environments, runs basic import verification, and publishes results continuously. The dashboard is live at https://sovereignmail.org/pypiplace . Data is also broadcast over the Yggdrasil mesh network for anyone who wants to pull and verify it independently.It's my first experiment running live on a free tier Oracle ARM instance.I find it useful. And kinda cool. I'd love anybody who want to run it to do so.https://github.com/PregnantPenguins789/vps-pypi-place https://github.com/PregnantPenguins789/yggcrawl
Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers - SnykMalicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers Snyk
R vs Python 2026: 57.9% Usage and 25x Package Gap [Tested] - tech-insider.orgR vs Python 2026: 57.9% Usage and 25x Package Gap [Tested] tech-insider.org
Sling TV Channels: a Full List of Packages (2026) - Business InsiderSling TV Channels: a Full List of Packages (2026) Business Insider
Xinference allegedly hacked by TeamPCP, Malicious Package In PyPi - OX SecurityXinference allegedly hacked by TeamPCP, Malicious Package In PyPi OX Security
DJI’s latest power station is proof that good things come in mini packages - The VergeDJI’s latest power station is proof that good things come in mini packages The Verge
N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust - The Hacker NewsN. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust The Hacker News
These Popular Las Vegas Hotels Are Launching All-inclusive Packages for the First Time Ever—Starting at $330 - Travel + LeisureThese Popular Las Vegas Hotels Are Launching All-inclusive Packages for the First Time Ever—Starting at $330 Travel + Leisure
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokensThe TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...
Show HN: Agent Package Manager (APM) for Agent ConfigurationI work at Microsoft/GitHub and built APM because I was managing agent configs — prompts, instructions, MCP servers — across Copilot, Claude Code, and Cursor. Every new project meant copying skill files, installing plugins by hand, hoping nothing drifted upstream. I realized we were missing the dependency management layer for this new category of config to unlock faster adoption, composability and innovation.APM (Agent Package Manager) is an open-source CLI that installs and manages AI agent dependencies (plugins, skills, rules, hooks, mcp, etc). It resolves transitive dependencies, pins versions with a lock file, and scans content for supply-chain attacks.This was posted a couple days ago without context (https://news.ycombinator.com/item?id=47421969). Here's the full story.1 minute video: https://github.com/microsoft/apm/releases/download/v0.8.2/ap...How it works:apm install — resolves any Agent Primitive (plugins, skills, hooks, rules...) and their transitive dependency tree from any
Westfield restaurant sending care packages to sailors - Western Mass NewsWestfield restaurant sending care packages to sailors Western Mass News
Malicious NPM package pino-SDK-v2 exfiltrates .env secrets to DiscordWe just analyzed a fresh supply chain attack on npm that's pretty well-executed.Package: pino-sdk-v2 Target: Impersonates pino (one of the most popular Node.js loggers, ~20M weekly downloads)Reported to OSV too- https://osv.dev/vulnerability/MAL-2026-1259What makes this one interesting: The attacker copied the entire pino source tree, kept the real author's name (Matteo Collina) in package.json, mirrored the README, docs, repository URL so everything looks legitimate on the npm page.The only changes: - Renamed package to pino-sdk-v2 - Injected obfuscated code into lib/tools.js (300+ line file) - No install hooks whatsoeverThe payload: Scans for .env, .env.local, .env.production, .env.development, .env.example files, extracts anything matching PRIVATE_KEY, SECRET_KEY, API_KEY, ACCESS_KEY, SECRET, or just KEY=, then POSTs it all to a Discord webhook as a formatted embed.The malicious function is literally named log(). In a logging library. That's some next-level camouflage.Why most scann