The OpenClaw Scanner is a free, open-source tool that helps companies detect the presence of the autonomous OpenClaw AI agent…
Read More »PyPI
Entity category: organization
Security researchers discovered a sophisticated supply chain attack targeting dYdX developers, where malicious code in npm and PyPI packages was…
Read More »
Heisenberg transforms static Software Bills of Materials (SBOMs) into dynamic defense tools by evaluating dependency health using data from deps.dev,…
Read More »
The Python Software Foundation rejected a $1.5 million U.S. government grant because the terms would have prohibited its diversity, equity,…
Read More »
Dependency-Track is an open-source platform that provides continuous, real-time monitoring of software supply chain risks by analyzing Software Bills of…
Read More »
The Python Software Foundation withdrew a major NSF grant application because new federal rules would have prohibited any DEI programming,…
Read More »
A new wave of malicious npm packages uses Ethereum smart contracts to hide command-and-control infrastructure, making detection more difficult. Attackers…
Read More »
DeepCode is an open-source platform that automates the conversion of research papers and technical documents into fully operational codebases, reducing…
Read More »
Cybersecurity experts discovered a malware campaign by Banana Squad targeting developers via 67 fake GitHub repositories, distributing trojanized Python files…
Read More »