Threat Watch– active
All incidents
More on Threat Watch
More unknown attacker incidents
- npm typosquat malware wave: heheheshsds, thththtbhthhth, @saidddddddddd/* — malicious packages fully compromise installed machines (no CVE) Critical · Supply chain
- Malicious npm package mock-datas-lib — full host compromise on install (no CVE) Critical · Supply chain
- @pasqua-baileys/baileys npm package is malware — full machine compromise; rotate all secrets Critical · Supply chain
- Malicious npm package that-fetch compromises all installed machines Critical · Supply chain
- Malicious npm package noon-contracts — full system compromise on install; no safe version exists (no CVE) Critical · Supply chain
- Malicious npm package canta-baileys — full system compromise on install (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.