Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
Visual Studio Magazine

Open VSX 1.0.0 Puts Focus on Open Extension Registry for VS Code Ecosystem

Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.
GitHub

dataforgoodfr/batch11_e_cartomobile

This project aims at encouraging and planning electric mobility in French territories by developing a dashboard leveraging Open-Data for decision makers. -.github/workflows ----- ochestrate GH actions ...
GitHub

QuantNBody : a python package for quantum chemistry/physics to manipulate many-body operators and wave functions.

QuantNBody is a python package facilitating the implementation and manipulation of quantum many-body systems composed of fermions or bosons. It provides a quick and easy way to build many-body ...