Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
AI chat toy company Bondu left its web console almost entirely unprotected. Researchers who accessed it found nearly all the ...