TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Attackers compromised the official Mistral AI Python package on PyPI along with hundreds of other widely-used developer packages, exposing GitHub tokens, ...
A malicious repository on Hugging Face impersonated OpenAI’s “Privacy Filter” project and briefly reached the platform’s top trending position before removal ...
The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows ...
Hugging Face hosts 352,000 unsafe model issues. ClawHub's registry contains 341 malicious AI agent skills. The AI supply chain is now the most attractive target in software security.
New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these ...
The SpaceX Falcon 9 rocket takes off from Vandenberg Space Force base carrying the Western Aerospace Thin-Sat into the ...
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a ...
Hosted on MSN
PyTorch Lightning versions 2.6.2 and 2.6.3 were compromised on April 30 — check your installs
On April 30, 2026, someone slipped credential-stealing malware into two freshly published versions of PyTorch Lightning, one of the most widely used frameworks in machine learning. Versions 2.6.2 and ...
Over 1,800 developers were likely infected in the Mini Shai-Hulud supply chain attack that hit SAP, Lightning, and Intercom ...
With Flash GA, the company is attempting to transition from being a provider of raw compute to becoming the essential orchestration layer for the AI-first cloud.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results