Threat Watch– active
All incidents
More on Threat Watch
More unknown npm publisher incidents
- Solana wallet stealer npm campaign: @johnruff215-dev/solana-wallet-tracker & @notrainer/nobtrainer-sdk exfiltrate wallet data via Discord webhook Critical · Supply chain
- pipeprobe-obf-m19n5: malicious npm package phones home via obfuscated DNS callback on install (no CVE) Critical · Supply chain
- Malicious npm Baileys forks (@axo_cuy/baileys, @bil-rgb/baileys) pull unpinned GitHub libsignal dependency Critical · Supply chain
- Malicious npm packages dependencykfeg, claims-acct-unlock, tefeest-npm-com-test, ssite-mock-server flagged as malware Critical · Supply chain
- Malicious npm package dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t fully compromises hosts Critical · Supply chain
- Malicious npm package dowload_ebok_lolita_by_vladimir_nabokov_oy1gy — full system compromise on install Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.