Cybersecurity articles tagged #Python on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/python-s-pyca-cryptography-gains-post-quantum-supporthttps://runtimerebel.com/blog/python-s-pyca-cryptography-gains-post-quantum-supportPython's pyca/cryptography library now supports NIST-standard ML-KEM and ML-DSA for post-quantum encryption, addressing future quantum threats.Mon, 10 Aug 2026 16:46:38 GMTCryptographyPythonMl KemMl DsaQuantum Computinghttps://runtimerebel.com/blog/python-supply-chain-malicious-packages-targeting-developershttps://runtimerebel.com/blog/python-supply-chain-malicious-packages-targeting-developersMalicious Python packages exploit trusted ecosystems like PyPI, enabling supply chain attacks on developer systems. Learn about the threat and mitigation.Sun, 09 Aug 2026 00:59:54 GMTPythonSupply Chain AttackPyPIMalwareSoftware Supply Chainhttps://runtimerebel.com/blog/ai-driven-vulnerability-surges-and-uat-11795-starland-rat-campaignhttps://runtimerebel.com/blog/ai-driven-vulnerability-surges-and-uat-11795-starland-rat-campaignAnalysis of a record Patch Tuesday driven by AI vulnerability research, alongside Cisco Talos findings on UAT-11795 deploying Starland RAT.Sat, 08 Aug 2026 08:31:29 GMTThreat IntelZero-DayRansomwareRemcosPythonhttps://runtimerebel.com/blog/github-and-pypi-time-based-defenses-against-supply-chain-attackshttps://runtimerebel.com/blog/github-and-pypi-time-based-defenses-against-supply-chain-attacksGitHub and PyPI introduce time-based delays in Dependabot to mitigate supply chain attacks by preventing the immediate ingestion of malicious packages.Sun, 26 Jul 2026 17:03:02 GMTGitHubPyPIDependabotSupply Chain SecurityPythonhttps://runtimerebel.com/blog/shai-hulud-attack-trojanized-pypi-packages-steal-developer-secretshttps://runtimerebel.com/blog/shai-hulud-attack-trojanized-pypi-packages-steal-developer-secretsNew Shai-Hulud supply chain attack compromises 19 science-focused PyPI packages, distributing malware to steal developer credentials and secrets.Mon, 08 Jun 2026 20:57:57 GMTShai HuludPyPISupply Chain AttackMalwareDeveloper SecretsPythonOpen Source Securityhttps://runtimerebel.com/blog/pypi-supply-chain-threat-deceptive-packages-target-developershttps://runtimerebel.com/blog/pypi-supply-chain-threat-deceptive-packages-target-developersAnalysis of malicious Python packages such as cryptography-util using deceptive naming to exfiltrate Discord tokens and system metadata via webhooks.Mon, 11 May 2026 05:25:24 GMTPyPIPythonSupply Chain AttackMalwareDiscord Webhookshttps://runtimerebel.com/blog/backdoored-pytorch-lightning-package-drops-credential-stealerhttps://runtimerebel.com/blog/backdoored-pytorch-lightning-package-drops-credential-stealerA malicious PyTorch Lightning package on PyPI delivers a credential stealer, targeting browser data, environment variables, and cloud service credentials.Mon, 04 May 2026 20:35:32 GMTPyTorch LightningPyPICredential StealerSupply Chain AttackPythonMalwarehttps://runtimerebel.com/blog/marimo-rce-via-cve-2024-41663-exploited-to-deliver-nkabuse-malwarehttps://runtimerebel.com/blog/marimo-rce-via-cve-2024-41663-exploited-to-deliver-nkabuse-malwareAttackers are exploiting a critical RCE in Marimo Python notebooks (CVE-2024-41663) to deploy NKAbuse malware via Hugging Face. Update to version 0.7.5.Thu, 16 Apr 2026 20:21:05 GMTCVE-2024-41663NKAbuseMarimoHugging FacePythonhttps://runtimerebel.com/blog/marimo-rce-via-cve-2024-52271-active-exploitation-mitigation-guidehttps://runtimerebel.com/blog/marimo-rce-via-cve-2024-52271-active-exploitation-mitigation-guideCritical pre-auth RCE vulnerability in Marimo (CVE-2024-52271) is under active exploitation for credential theft. Update to version 0.9.11 immediately.Sun, 12 Apr 2026 16:14:41 GMTCVE-2024-52271MarimoRCEPythonVulnerabilityhttps://runtimerebel.com/blog/litellm-1-82-8-supply-chain-compromise-via-malicious-pth-filehttps://runtimerebel.com/blog/litellm-1-82-8-supply-chain-compromise-via-malicious-pth-fileSecurity analysis of a supply chain compromise in litellm 1.82.8 on PyPI, where a malicious .pth file enables automatic code execution on Python startup.Wed, 08 Apr 2026 12:29:28 GMTLiteLLMPyPISupply Chain AttackPythonRCEhttps://runtimerebel.com/blog/telnyx-pypi-package-compromised-by-teampcp-via-steganographyhttps://runtimerebel.com/blog/telnyx-pypi-package-compromised-by-teampcp-via-steganographyTeamPCP threat actors distributed malicious Telnyx Python package versions 4.87.1 and 4.87.2 on PyPI to harvest credentials using hidden WAV files.Fri, 27 Mar 2026 20:15:00 GMTTelnyxPyPITeamPCPPythonSteganographyCredential Thefthttps://runtimerebel.com/blog/forcememo-credential-theft-compromises-python-repositorieshttps://runtimerebel.com/blog/forcememo-credential-theft-compromises-python-repositoriesResearchers reveal ForceMemo, a campaign exploiting credentials stolen via GlassWorm to compromise hundreds of GitHub accounts and Python repositories.Mon, 16 Mar 2026 12:24:53 GMTForceMemoGlassWormGitHubPythonSupply Chain AttackCredential Thefthttps://runtimerebel.com/blog/ai-generated-slopoly-malware-linked-to-interlock-ransomware-attackshttps://runtimerebel.com/blog/ai-generated-slopoly-malware-linked-to-interlock-ransomware-attacksAnalysis of the AI-generated Slopoly malware and its role in Interlock ransomware operations, including technical details and detection strategies.Thu, 12 Mar 2026 20:13:39 GMTSlopolyInterlockRansomwareAI Generated MalwarePythonhttps://runtimerebel.com/blog/over-100-github-repositories-distributing-boryptgrab-stealerhttps://runtimerebel.com/blog/over-100-github-repositories-distributing-boryptgrab-stealerA large-scale campaign on GitHub utilizes over 100 repositories to distribute BoryptGrab, an info-stealer targeting crypto wallets and browser data.Sat, 07 Mar 2026 16:09:43 GMTBoryptGrabGitHubInfostealerPythonMalware Campaignhttps://runtimerebel.com/blog/arkanix-stealer-rapid-disappearance-of-c-python-malwarehttps://runtimerebel.com/blog/arkanix-stealer-rapid-disappearance-of-c-python-malwareArkanix Stealer, a C++ and Python-based info-stealer, emerged briefly, exfiltrating system data, browser credentials, and files before vanishing. Analysis of its TTPs.Wed, 25 Feb 2026 04:42:27 GMTArkanix StealerInfostealerMalwareCPythonData ExfiltrationDiscord WebhooksCyfirma