Threat Watch– active
All incidents
More on Threat Watch
More unknown typosquat incidents
- bundyfed PyPI malware: malicious setup.py downloads infostealer during install Critical · Supply chain
- 2026-11-chromacli campaign: chromacli / supercolor-tui / rainbowcolors (PyPI) — typosquatted color libs drop Solace infostealer on Windows Critical · Supply chain
- DNS-beacon typosquat/dependency-confusion malware: blender-headless, expect-tests, infra-libs (PyPI) exfiltrate hostnames Critical · Supply chain
- 2026-11-old-pyuserfox campaign: pyuserox, pyuserfox, twitch-stream-py PyPI packages download and execute remote malicious code on import Critical · Supply chain
- PyPI packages qzc690382-385: install-time backdoor shells and host recon via Xinference API Critical · Supply chain
- gcp-log-poc PyPI malware: import-time exfiltration of environment variables (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.