Threat Watch– active
All incidents
More on Threat Watch
More PyPI incidents
- aurum-pay PyPI malware: remote code execution via hidden command execution on first SDK call Critical · Supply chain
- humbility-shared PyPI malware: install-time host data exfiltration (no CVE) Critical · Supply chain
- fragment-api-py 14.4.2 backdoor: PyPI TON wallet drainer steals seed-wallet funds on client startup Critical · Supply chain
- 2025-11-spellcheckers campaign: logger-libs (PyPI) — malicious package downloads and executes remote payload (no CVE) Critical · Supply chain
- 2026-11-parseyaml campaign: extrahtml & parseyaml (PyPI) — malicious YAML-loader dependency downloads and executes remote code Critical · Supply chain
- bundyfed PyPI malware: malicious setup.py downloads infostealer during install Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.