Threat Watch– active

Incident archive

Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.

2,895 incidents, newest first. Page 1 of 29. 100 incidents from 20 October 2026 to 27 October 2026.

27 October 2026

Agno eval() code injection in FunctionCall field_type — arbitrary Python code execution (CVE-2026-35002) Critical · Patch now
pydicom DS/IS NaN/inf validation bypass → MONAILabel crash & silent inference corruption (CVE-2026-48705) Critical · Patch now
Malicious npm package @camera.ui/camera-ui-nvr-windows-amd64 1.6.1 fully compromises hosts Critical · Supply chain
h13t0ry-hello-demo (PyPI): malicious package spawns reverse shell on import, giving attackers full command execution Critical · Supply chain
UNM Health Sciences Center cyberattack: extortion group BYOD claims theft of student/employee PII, EHR data High · Breach
AfD email hosting breach (Alternita Dienstleistungs GmbH) — hack-and-leak exposed 345k accounts, 1TB+ of emails High · Breach
CoreGraphics zero-day backported patches: Apple iOS/iPadOS — arbitrary code execution via crafted file (CVE-2026-86950) High · Patch now
SquareML access key leak exposes data of 238,000 Denver Health Medical Plan members Medium · Breach
ENGIE data breach — customer data stolen via compromised partner marketing platform (France) Medium · Breach

26 October 2026

LiteLLM PyPI/Docker supply-chain compromise: stolen maintainer tokens pushed credential-stealing v1.107.0 Critical · Supply chain
Malicious npm package ctf-agent 0.1.0 — full system compromise on install Critical · Supply chain
Malicious npm packages: path-stream-utils-testmetest and @iobandamwer/native-helper — full system compromise on install (no CVE) Critical · Supply chain
npm malware wave: @eforms/forms-api, jshelperdependenceny, @iobandamwer/cache-helper — malicious packages fully compromise hosts Critical · Supply chain
@capsense npm packages (@capsense/core-ui, @capsense/ccx-welcome-page) — malicious packages fully compromise installed machines Critical · Supply chain
Malicious npm packages: harlow-css-mixer, birch-css-utils, postcss-semantic-themes — full system compromise Critical · Supply chain
netweavex typosquat malware (PyPI) — malicious clone downloads remote code on import (no CVE) Critical · Supply chain
FortiOS / FortiManager / FortiAnalyzer / FortiMail / FortiAuthenticator — critical & high severity flaws found with AI assistance, details embargoed until Nov 10 Critical · Patch now
PyPI typosquat malware: changes-lxc-wrapper & zagents-framework exfiltrate host info on install/import (no CVE) Critical · Supply chain
@worca/app npm package: malicious code in 1.14.0-rc.2 fully compromises installed machines (no CVE) Critical · Supply chain
PyPI typosquat infostealer campaign (donutautosellsrc): claudeopuseni, claudeopusenifile, dictmerge-lite — malicious packages steal credentials, wallets and browser data Critical · Supply chain
numbors npm package 1.6.1 is malware — full machine compromise; rotate secrets Critical · Supply chain
dsh-native (npm) — malicious package version 1.4.1 fully compromises installed machines (no CVE) Critical · Supply chain
npm malware wave: react-dropzone-v4, ap3-foundations-ui, css-grid-snap-util, @regex33-hackerone/tb-compat — full machine compromise Critical · Supply chain
orderly-plugin-liquidity-heatmap (npm): malicious package fully compromises machines that install it (no CVE) Critical · Supply chain
Malicious PyPI package claudeopusfile — steganographic infostealer with blockchain-based C2 (no CVE) Critical · Supply chain
@s4yhiitestpoc/r2-https-b npm package is malware — full machine compromise, no safe version Critical · Supply chain
Malware in monitoring-agent npm package — full system compromise; rotate all secrets Critical · Supply chain
@s4yhiitestpoc npm malware: malicious scan-* packages fully compromise installed machines Critical · Supply chain
Gheist: GitHub Actions token abuse — stolen tokens plant secret-harvesting workflows across 850+ accounts High · Supply chain
MALFEX: AI coding agents (Codex, Claude Code) — planted AGENTS.md in Downloads tricks agent into installing malicious npm package High · Supply chain
University of Copenhagen data breach: hackers access test environment exposing 525,000 people's data Medium · Breach

25 October 2026

nebulallm typosquatting malware: malicious PyPI package executes remote DLL during pip install Critical · Supply chain

Undated

npm typosquat cluster (appit-* / ionic-insta-search): malicious packages flagged as malware Critical · Supply chain
Dependency-confusion npm malware: @drone-js-ext & @fmr-ap153177/@futurae-public stubs beacon hosts / pull off-registry tarballs Critical · Supply chain
w-mousekey npm malware — package fully compromises machines that install it (no CVE) Critical · Supply chain
Malicious npm package event-bus-lite-testmetest — obfuscated installer decrypts and runs hidden Bun payload Critical · Supply chain

25 October 2026

zagents-message-bus (PyPI): malicious package exfiltrates host info on install/import (no CVE) High · Supply chain

Undated

fontus PyPI malware: fingerprinting/exfiltration package (no CVE) Medium · Supply chain

24 October 2026

npm malware wave: tailwindcss-theme-kit, noelc-css-blender, tailwind-base-buttons — malicious packages fully compromise installed machines Critical · Supply chain

23 October 2026

HPE ArubaOS: 72 vulnerabilities patched, including eight max-severity unauthenticated RCE and auth bypass flaws (CVE-2026-79844 through CVE-2026-79851) Critical · Patch now
Dependency-confusion beacon malware: wiseke npm packages (@greenlake, @sxm-web, @drone-js-ext, @ppa-web-components) — postinstall exfiltrates hostname/paths to 185.158.107.175 Critical · Supply chain
Arista VeloCloud Orchestrator SQL Injection Vulnerability (CVE-2026-114625) Critical · Patch now
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability (CVE-2026-110447) Critical · Patch now
PyPI: malicious package journey-teste-shellhello spawns reverse shell during installation (no CVE) Critical · Supply chain
@tekmidian/pai: npm package flagged as malware, full host compromise (no CVE) Critical · Supply chain
@kibt/www-nuxt-i18n: npm package flagged as malware, all versions compromised (no CVE) Critical · Supply chain
@cecm-web-sdk/core: npm package is malware, full compromise of installed machines (no CVE) Critical · Supply chain
@blueskydataplatform/shared-ui: npm package is malware, full compromise of any machine where installed (no CVE) Critical · Supply chain
@ecg-internal (npm): four packages flagged as malware, full compromise of affected machines (no CVE) Critical · Supply chain
GrabCAD (npm @grabcad/* packages): malicious packages published to npm compromise any machine that installs them (no CVE) Critical · Supply chain
qowa (PyPI): malicious package disguised as utility provides C2 server/agent with file exfiltration via Telegram bot Critical · Supply chain
skillward (npm): malicious package compromises machines of developers who install it (no CVE) Critical · Supply chain
PyPI: Malicious packages onsokets, badgertask, brookworker, cobbleload published with file-exfiltration and remote-loader code (no CVE) Critical · Supply chain
2026-10-voice-synthesis-profiles loader campaign: thornqueue, runpier, workslip, taskquay (PyPI) — malicious packages download and execute remote code (no CVE) Critical · Supply chain
npm malware: @k18k/entrypoint-sdk platform packages and orqiva-runtime-win32-x64 fully compromise installed hosts Critical · Supply chain
Echo (labstack/echo): three denial-of-service vulnerabilities in BodyDump, Decompress and WebSocket proxy middleware fixed in v4.16.1 / v5.4.1 High · Patch now
Time4Popcorn (Popcorn Time fork): abandoned updater allowed RCE via hijacked update domain (CVE-2026-30612) High · Patch now
IO::Compress::Brotli (Perl): bundled brotli decoder out-of-bounds write allows memory disclosure, crashes, or potential RCE when decompressing untrusted data (CVE-2026-115936) High · Supply chain
APT41 BlackX UEFI bootkit bypasses Secure Boot via unrevoked Baton Drop certificate (CVE-2022-21894) High · Patch now
Quest Diagnostics: unauthorized access to Quanum LSM exposed patient records High · Breach

22 October 2026

Node2Shell / HTTP2Shell: Brotli decoder flaw lets attackers run code in Node.js, Bun, Python and other HTTP software (CVE-2026-111497) Critical · Patch now
Linux KSMBD: Two CVSS 9.0 pre-auth/transport RCE flaws disclosed publicly before kernel fixes available Critical · Patch now
Microsoft: VM Inspector for Azure Virtual Machines elevation of privilege via link following (CVE-2026-110063) Critical · Patch now
Azure Kubernetes Configuration Service: missing authentication allows unauthorized attackers to elevate privileges over a network (CVE-2026-83938) Critical · Patch now
Microsoft Entra Application Proxy: elevation of privilege via improper authentication (CVE-2026-97785) Critical · Patch now
Pillow: multi-frame image loaders reuse stale native buffers after mode transitions, enabling OOB writes and RCE (CVE-2026-96639) Critical · Patch now
mem0ai: SQL injection in Databricks vector store lets attackers execute SQL via crafted memory content (CVE-2026-115324) Critical · Patch now
x402 SDKs: Critical flaws let malicious APIs drain AI agents' token balances, bypass Solana payments, and relay login signatures (no CVEs assigned) Critical · Patch now
npm: four malicious packages (@conduitops/logview-archive, formatting-subtitles, simplewave, log-rotate-testmetest) execute attacker-controlled code at install time (no CVE) Critical · Supply chain
PyPI: typosquatted packages 1h1 and aanthropic download and execute malware during install (no CVE) Critical · Supply chain
npm: Four malicious packages (@sudobility/indexer_client, agentic-awesome-skills, opencode-skills-collection, @pkgship/frpc-darwin-amd64) flagged as malware with no patched versions Critical · Supply chain
@seggy116/next-diff: npm package contains malware, full host compromise (no CVE) Critical · Supply chain
@factiii/runner: npm package flagged as malware, full host compromise (no CVE) Critical · Supply chain
Electron: compromised eMudhra intermediate certificates allow TLS server impersonation (CVE-2026-115570) High · Supply chain
Microsoft Exchange Online: stack-based buffer overflow allows authorized attackers to execute remote code (CVE-2026-96185) High · Patch now
Azure Pipelines: command injection allows unauthorized remote code execution (CVE-2026-105014) High · Patch now
Twisted: Three unauthenticated remote memory-exhaustion DoS vulnerabilities in words IRC, XMPP XML stream, and conch telnet parsers (CVE-2026-115776, CVE-2026-115775) High · Patch now
gitoxide gix: untrusted .git/config can disable .git path-protection checks, enabling hook/config overwrite (GHSA-q54r-jf2p-rfr2) High · Patch now
multer: DoS process crash via pending async fileFilter after request teardown (CVE-2026-113872) High · Patch now
virtualenv: bash activator stores unescaped --prompt in PS1, enabling command execution on later prompt expansion (CVE-2026-115586) High · Patch now
toml (npm): Three high-severity CPU DoS vulnerabilities in toml.parse() allow event-loop blocking via crafted TOML documents (CVE-2026-114144, CVE-2026-114143) High · Patch now
Strands Agents SDK: A2A server leaks conversation history across tenants (CVE-2026-115419) High · Patch now
body-parser: single unauthenticated request crashes Node apps via trailing bytes after gzip body (CVE-2026-111181) High · Patch now
Azure AI Foundry: SSRF allows authorized attacker to elevate privileges over a network (CVE-2026-108456) Medium · Patch now

21 October 2026

20 October 2026