Threat Watch– active
All incidents
More on Threat Watch
More unknown typosquat incidents
- 2026-11-reqnest: Malicious PyPI packages reqnest, reqnests, fhqiouhq, ajfhiuqhfqgwerhuqnfqh exfiltrate Telegram files on import Critical · Supply chain
- Malicious npm package @needsaudit/n — full system compromise of any machine where installed (no CVE) Critical · Supply chain
- Malicious npm package @ts-expect-error/n — full compromise of any machine where installed (none) Critical · Supply chain
- Malicious npm packages @exclipz/baileys and @exclipz/bails — typosquat-style malware grants full host compromise Critical · Supply chain
- pino-testkit campaign: loader-utils-kit, pino-std, @k.vict1999/pino-std-serializers — malicious npm packages execute obfuscated code on install/import (no CVE) Critical · Supply chain
- Dependency-confusion beacon campaign: wiasdcxc, wiselllx, wisewwasd, wxwxtt (npm) — postinstall exfiltrates host info Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.