Threat Watch– active
All incidents
More on Threat Watch
More n incidents
- @solana-common/utils npm package is malware — full machine compromise, no patched versions (GHSA-r533-jgcg-qr68) Critical · Supply chain
- tailwind-kinetix npm package is malware — full machine compromise, no safe version exists Critical · Supply chain
- @unipswap/postcss-animate-units: malicious npm package fully compromises machines running it (no CVE) Critical · Supply chain
- @solarcraft/observix npm package is malware — full machine compromise on install Critical · Supply chain
- agent-trace-kit (npm): malicious package compromises any machine where installed (no CVE) Critical · Supply chain
- Malicious nicegui npm package — full system compromise on install (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.