Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
Tech Times

New APT Group Hits Power Grids in Three Countries with AI-Crafted Malware

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...
Windows Report

Malicious PyPI Packages Let Hackers Control Telegram Bot Servers

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...
The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
Tech Times

North Korea’s Lazarus Group Hid a Full RAT in Six Rollup Polyfill npm Packages

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
The Next Web

North Korea-linked npm packages impersonate Rollup polyfill tools to steal developer secrets

Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.
CNET

Chrome Has Been Secretly Downloading AI to Your Computer. Here's What You Can Do

Chrome has been automatically downloading Gemini Nano (a 4GB AI model) to users' computers without notification or an easy way to prevent it. Alex Valdes from Bellevue, Washington has been pumping ...