Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...
The Hacker News

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.
Opinion
Database Trends and ApplicationsOpinion

MotherDuck Previews Flights, an Agent-Native Ingest Tool Inside Python

MotherDuck is launching Flights, an agent-native data pipeline that enables users to choose the MCP server and AI agent of their choice to build and deploy data pipelines in minutes using a flexible, ...
GitHub

GitHub - Query-farm/vgi-python: Extend DuckDB with user-defined functions in Python over Apache Arrow — the Python implementation of the Vector Gateway Interface (VGI). No ...

uvx haybarn-cli "vgi:my_worker?location=uv run my_worker.py" This drops you into a session with the functions you just added, available as my_worker.multiply ...