JFrog Security Real Time Posts

Attackers are hiding malware inside PyTorch models in PyPI packages mimicking Alibaba’s Aliyun. Once installed, the payload exfiltrates system data, highlighting the growing risk of malicious AI in developer tools.