Supply chain attacks feel like they're becoming more and more common.
TeamPCP strikes again, with almost identical code to LiteLLM.
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
Chainguard is racing to fix trust in AI-built software - here's how ...
LangChain and LangGraph have patched three high-severity and critical bugs.
CNCF launches Dapr Agents v1.0 at KubeCon EU, prioritizing crash recovery and durability over intelligence. Zeiss validates ...
LiteLLM, a massively popular Python library, was compromised via a supply chain attack, resulting in the delivery of ...
Independent researcher Simon Willison raises questions about hidden Series A and B rounds, investor windfalls, and whether a ...
AI coding tools and autonomous agents are generating more code, pulling in more dependencies, and interacting with open source at a scale humans have never seen before," said Dan Lorenc, CEO and ...
On the morning of March 24, 2026, tens of thousands of software developers working on AI applications were unknowingly exposed to malware.
OpenAI has acquired Astral, the company behind Python tools uv and Ruff, to integrate them into its Codex platform as it ...