GitHub Introduces 3-Day Dependabot Cooldown to Mitigate Poisoned Package Attacks
GitHub has announced a new cooldown mechanism for Dependabot that introduces a mandatory three-day waiting period before opening pull requests for version…
Tag: Python
PyPI: Python Package Repository
The Python Package Index is the official repository for third-party Python packages, providing a platform for developers to publish and install software.…
NumPy: Numerical Computing Library
NumPy arrays are among the AI file types targeted by ENCFORGE ransomware.
FREAKYPOLL: Python Backdoor
FREAKYPOLL is a Python-based backdoor deployed in the UAC-0145 campaign, providing remote access to infected systems.
KNUCKLEBALL: Python Payload Deploying Web Shells on SonicWall SMA
A Python script used by UTA0533 to deploy Suo5 and ORANGETAIL JAR archives into legitimate SonicWall processes for persistent access.
Marimo: Reactive Notebook for Python
Marimo is a reactive notebook for Python. CVE-2026-39987 is a pre-auth RCE vulnerability in Marimo notebooks before version 0.23.0.
MHDDoS: Open-Source DDoS Toolkit
MHDDoS is an open-source Python DDoS toolkit that has been partially ported into TuxBot v3 Evolution. It provides various DDoS attack methods…
MicroPython Affected by FatFs Vulnerabilities
MicroPython, a Python implementation for microcontrollers, is affected by the FatFs flaws.
BusySnake Stealer: Python-Based Infostealer Used by Armored Likho
BusySnake Stealer is a Python-based information stealer targeting Windows systems, used by Armored Likho. It implements evasion techniques like dynamic bytecode decryption…
ChocoPoC RAT Targets Researchers via Fake PoC Exploit Repos on GitHub
Attackers are distributing a data-stealing trojan named ChocoPoC through fake proof-of-concept (PoC) exploit repositories on GitHub, specifically targeting vulnerability researchers. The malware,…