Threat Watch– active
All incidents
More on Threat Watch
More OpenAI incidents
- Kali365/VoidProxy: fake OpenAI/SpaceX/Anthropic event pages steal Microsoft and Google sessions (no CVE) High · Breach
- ChatGPT share-link sandbox escape — attacker code in victim session, private chat theft Critical · Patch now
- Command Code: distillation-linked incident forces revocation of all API keys Medium · Breach
- Codex, Claude Code: planted AGENTS.md in Downloads makes agents install malicious npm package function-color High · Supply chain
- OpenCode: Console breach exposed stored AI provider API keys, ~1.4% of users hit High · Breach · Closed
- TanStack: 84 malicious @tanstack/* npm versions published via poisoned GitHub Actions cache (CVE-2026-45321) Critical · Supply chain · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.