# PhantomRPC flaw, Checkmarx GitHub dark web data, PyPI package infostealer

Page: https://stenobird.com/podcast/cybersecurity-headlines-744869/phantomrpc-flaw-checkmarx-github-dark-web-data-pypi-package-infostealer
Text version: https://stenobird.com/podcast/cybersecurity-headlines-744869/phantomrpc-flaw-checkmarx-github-dark-web-data-pypi-package-infostealer.md
Podcast: [Cybersecurity Headlines](https://stenobird.com/podcast/cybersecurity-headlines-744869)
Published: 2026-04-28T07:00:00+00:00
Episode link: https://cisoseries.libsyn.com/phantomrpc-flaw-checkmarx-github-dark-web-data-pypi-package-pushes-infostealer
Audio file: https://traffic.libsyn.com/secure/cisoseries/CSH_2026-04-28.mp3?dest-id=2260670
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cybersecurity-headlines-744869/episodes/phantomrpc-flaw-checkmarx-github-dark-web-data-pypi-package-infostealer
Duration seconds: 466

## Resource

PhantomRPC flaw enables privilege escalation Checkmarx confirms GitHub data hit dark web PyPI package hacked to push infostealer Get the show notes here: https://cisoseries.com/cybersecurity-news-phantomrpc-flaw-checkmarx-github-dark-web-data-pypi-package-infostealer/ Thanks to our episode sponsor, Guardsqaure Your backend is only as secure as your frontend. Research shows that client-side compromise is now a primary driver of API risk. With sixty-three percent of leaders detecting mobile app tampering or cloning last year, don't leave your mobile app security to chance. Get multilayered protection for your entire mobile app ecosystem from the outside in. Learn more at Guardsquare.com .

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybersecurity-headlines-744869/episodes/phantomrpc-flaw-checkmarx-github-dark-web-data-pypi-package-infostealer/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cybersecurity-headlines-744869/phantomrpc-flaw-checkmarx-github-dark-web-data-pypi-package-infostealer.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.