Phishing emails mimicking PyPI target developers to steal credentials via fake sites. Users urged to stay alert.

A vulnerability in Google's Gemini CLI allowed attackers to silently execute malicious commands and exfiltrate data from ...