Supply chain attacks feel like they're becoming more and more common.
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
TeamPCP strikes again, with almost identical code to LiteLLM.