Threat Watch– active
All incidents
More on Threat Watch
More GitHub incidents
- b20miner npm package: malicious cryptominer backdoor fully compromises installed hosts (no CVE) Critical · Supply chain
- @zaip-ai/cli npm package is malware — full machine compromise, no patched versions (GHSA-ffq4-h5jm-8pqr) Critical · Supply chain
- itsa-utils / itsa-react-checkbox npm packages trojanized with malware (no CVE) Critical · Supply chain
- Malicious npm package dsh-plugin-blender-3d — full machine compromise for installers (no CVE) Critical · Supply chain
- @walknpm/todo-cli npm package is malware — full machine compromise for installers of v2.0.1 (no CVE) Critical · Supply chain
- my-empty-package (npm): malicious package compromises machines that install it Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.