Threat Watch– active
All incidents
More on Threat Watch
More GitLab incidents
- OverLord stealer: forged commit force-pushed to antd-img-crop GitHub repo steals credentials on build High · Supply chain
- strutil-core Ruby gem 1.0.1: Shai-Hulud-descendant worm steals credentials, poisons AI tools Critical · Supply chain
- Synology DSM: C3RB3R ransomware encrypts NAS data on outdated DSM builds Critical · Patch now
- Shai-Hulud worm wave 2: @testsecuiitytestme/cache-helper npm package — malicious native-addon loader steals credentials (no CVE) Critical · Supply chain
- testmetest npm worm: 42 GitHub repositories armed with hidden publisher payload (no CVE) High · Supply chain · Closed
- GitLab: unauthenticated RCE via Ruby Onigmo integer overflow, all releases since 7.0 (CVE-2026-110264) Critical · Patch now · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.