The developers built malware before and participated in competitions used as recruiting platforms for Chinese state hackers.

CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

When attackers compromised Ultralytics YOLO, a popular real-time object detection machine-learning package for Python, most assumed the Python Package Index, or PyPI, must be the point of failure.

AI-powered Villager tool reached 11,000 PyPI downloads since July 2025, enabling scalable cyberattacks and complicating ...

Members of the North Korean hacker group Lazarus posing as recruiters are baiting Python developers with coding test project for password management products that include malware. The attacks are part ...

The following content is brought to you by Mashable partners. If you buy a product featured here, we may earn an affiliate commission or other compensation. TL;DR: The 2022 Complete Raspberry Pi and ...

The following content is brought to you by Mashable partners. If you buy a product featured here, we may earn an affiliate commission or other compensation. Arguably one of the most useful second ...