Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
The Hacker News

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.
Nieman Journalism Lab

Highlighting the funniest moments, this startup aims to bring public meetings into the TikTok era

“This is, I think, the sixth time [I’ve] come here,” the woman’s public comment to the Corpus Christi City Council begins. She is wearing a full-body cockroach costume, antennae and all. “Last time, I ...
Windows Report

Malicious PyPI Packages Let Hackers Control Telegram Bot Servers

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...