Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

After Google said it had already filtered suspicious activity, this unexpected approach restored campaign profitability.

Spam accounts overwhelmed my database. Claude found the weaknesses, Codex wrote the fixes, and I deployed a new defense.

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...