No more waiting on slow-loading modules or wasting time on ad hoc workarounds: Python 3.15’s new ‘lazy imports’ mechanism has ...

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...

Overview Recently, NSFOCUS Technology CERT detected that the GitHub community disclosed that there was a credential stealing program in the new version of LiteLLM. Analysis confirmed that it had ...

Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...

在数字化转型的深水区，即时通讯工具已从单纯的社交软件演变为承载关键基础设施运营、政府决策流转与军事指挥控制的重要节点。根据2026年3月24日美国联邦调查局（FBI）与网络安全和基础设施安全局（CISA）发布的联合公告显示，针对主流商业即时通讯应用的钓鱼攻击正在全球范围内蔓延。值得注意的是，此次攻击并未利用底层加密协议的数学缺陷，而是通过精心设计的社会工程学手段，绕过了端到端加密（E2EE）的防线 ...

报告日期：2026-02-28 关键词： Agent Skills, MCP, OpenClaw, A2A, Agentic AI, 模块化架构一、谁提出了从 Agent 到 Skills 的转变？1.1 起源：Anthropic ...