#python

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

Sep 29, 2026 // 13:10

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log […]

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Jun 29, 2026 // 09:45

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised […]

JDownloader site hacked to replace installers with Python RAT malware

May 9, 2026 // 22:36

The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows and Linux installers, with the Windows payload found […]

New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

May 1, 2026 // 00:52

Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEP#DOOR that comes with capabilities to establish persistent access and harvest a wide […]

New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials

May 1, 2026 // 00:12

Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEP#DOOR that comes with capabilities to establish persistent access and harvest a wide […]

Stolen GitHub tokens enable GlassWorm attack. Python repos force-pushed with malware.

Mar 18, 2026 // 13:26

The GlassWorm malware is being exploited in an active attack that uses compromised GitHub tokens to inject malicious code into hundreds of Python software collections. […]