Threat Watch– active
All incidents
More on Threat Watch
More n incidents
- csvflow-schema (npm): malicious postinstall beacon package removed from registry Critical · Supply chain
- trajmetrics PyPI malware: system-wide file scanning and exfiltration via background job Critical · Supply chain
- glyphmatrix-fixture (npm): malicious package versions 1.0.0 and 1.0.1 fully compromise installed machines (no CVE) Critical · Supply chain
- Three TLS Bugs in GoAhead web server: revoked certs accepted, DH truncation, chain-depth bypass (no CVEs) Critical · Patch now
- Malicious npm packages csec-form-validator, csec-crypto-toolkit (and ccsec- typosquat variants) — full system compromise Critical · Supply chain
- agentenact (npm): malicious package 0.2.0 fully compromises machines that install it (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.