Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
Clawdbot is a viral, self-hosted AI agent that builds its own tools and remembers everything—but its autonomy raises serious security risks.