Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
With the PyArrow library installed, pandas 3.0 interprets string columns automatically as the str data type instead of NumPy- ...
Open source malware surged 73% in 2025, with npm as a key target with rising risks in software supply chains and developer environments.