Cybersecurity researchers have disclosed a malicious package uploaded to the Python Package Index (PyPI) repository that's designed to reroute trading orders placed on the MEXC cryptocurrency exchange ...

The disclosure comes weeks after another critical vulnerability was disclosed in Apache Parquet's Java Library ( CVE-2025-30065, CVSS score: 10.0) that, if successfully exploited, could allow a remote ...