Threat Watch– active
All incidents
More on Threat Watch
More GitHub incidents
- cutekitten05 npm typosquat campaign: axelarjs-sdk, wallet-adapter-base, cutekitten-test, bigbob22-test exfiltrate host info via Discord webhook Critical · Supply chain
- Malicious npm package calculator-preinstall-hook-demo exfiltrates hostname and username via Discord webhook Critical · Supply chain
- GamerD11/ping_test npm malware: claims-ac1 exfiltrates host details via install script (no CVE) Critical · Supply chain
- zystcdemo (npm): malicious postinstall payload exfiltrates host info to srctest.zystcc.cn on install Critical · Supply chain
- Solana wallet stealer npm campaign: @johnruff215-dev/solana-wallet-tracker & @notrainer/nobtrainer-sdk exfiltrate wallet data via Discord webhook Critical · Supply chain
- Dependency-confusion beacon: ms-client-portal npm package phones home on install (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.