OpenAI acquires Astral, the Python startup whose tools run on millions of developer machines

OpenAI has acquired Astral, a startup whose essential Python development tools are used by millions. This strategic move aims ...
The Hacker News

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
Tom's Hardware on MSN

Rogue OpenClaw AI agent wrote and published 'hit piece' on a Python developer who rejected its code

An OpenClaw autonomous AI agent has hit back at a volunteer maintainer of a Python library who rejected its code by posting a ...

OpenAI acquires open-source Python tooling startup Astral

OpenAI Group PBC today announced plans to acquire Astral Software Inc., a startup with a set of widely used Python development tools.  The terms of the deal were not disclosed. Astral’s development ...
SecurityWeek

ForceMemo: Python Repositories Compromised in GlassWorm Aftermath

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
GlobalData on MSN

OpenAI to expand Codex with Astral acquisition amid AI rivalry

Astral creates Python development tools such as uv, a package and project manager, and Ruff, a linter and formatter.

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
TechJuice

GlassWorm Malware Silently Infects Hundreds of Python Projects

GlassWorm attack uses stolen GitHub tokens to inject malware into Python repositories, exposing developers to supply chain risks.

Chainguard is racing to fix trust in AI-built software - here's how

Chainguard is racing to fix trust in AI-built software - here's how ...

Here’s how to vote in Texas’ May 26 primary runoff elections

Voters will decide over 30 races, including a nationally watched battle between John Cornyn and Ken Paxton. The registration ...
Security Boulevard

That “job brief” on Google Forms could infect your device

Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain. The attack typically begins when a victim downloads a business-themed ZIP ...