Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Florida Python Challenge returns after last year’s record removal

Video from previous story: FWC announces winners of the 2025 Florida Python Challenge TAMPA, Fla. (WFLA )— In just about a ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

macOS clipboard app Maccy has a fake out there stealing passwords

Maccy users are being warned about fake sites after researchers found malware using the app’s name to steal Mac login ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude ...
The Hacker News

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories ...