#official


Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

Sep 29, 2026 // 13:10

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log […]

Official CheckMarx Jenkins package compromised with infostealer

May 12, 2026 // 01:16

Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been published on the Jenkins Marketplace. The […]

DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

May 6, 2026 // 00:48

A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky. “These […]

Official SAP npm packages compromised to steal credentials

Apr 30, 2026 // 01:56

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication tokens from developers’ […]

FBI Warns of Fake City and County Official Phishing Attacks

Mar 9, 2026 // 19:58

The FBI and the Internet Crime Complaint Center (IC3) issued a public service announcementwarning of a sophisticated phishing campaign where cybercriminals impersonate city and county officials. The Scam Mechanism The […]

Malicious StripeApi.Net NuGet Package Typosquats Official Library to Steal API Keys.

Feb 26, 2026 // 14:58

A malicious NuGet package named StripeApi.Net recently impersonated the official Stripe.net library to steal sensitive API tokens from developers. Key Details of the Attack Impact and Mitigation