Threat Watch– active
All incidents
More on Threat Watch
More Command Code incidents
- doctreelstm (PyPI): malicious package exfiltrates host info on install/import (no CVE) Critical · Supply chain
- Malicious npm package local-commander-agent 0.3.52 fully compromises hosts Critical · Supply chain
- Signal K resources API path traversal → JWT secret leak & RCE (GHSA-4xm8-rg9h-jhq2) Critical · Patch now
- 2025-11-spellcheckers campaign: log-utils-sdk (PyPI) — malicious clone downloads second-stage Python RAT (no CVE) Critical · Supply chain
- Malicious PyPI packages twitter-request-diagnostics and test-01-rafamarrara-learning-dc backdoor web apps Critical · Supply chain
- Black October: stolen platform-stored AI keys fuel Bedrock LLMjacking across nine platforms High · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.