Threat Watch– active
All incidents
More on Threat Watch
More unknown npm publisher incidents
- npm typosquat malware wave: bznio5, v36sl2, rtvu6h, ll3zea — full machine compromise on install Critical · Supply chain
- Malicious npm 'game hack generator' packages — full machine compromise on install (no CVE) Critical · Supply chain
- npm typosquat malware wave: k7nhgj, 9ct8bi, winjb6, 1b67v5 — full machine compromise on install Critical · Supply chain
- Malware in dsh-moss-console: npm package dsh-moss-console v3.3.0 fully compromises installed machines (no CVE) Critical · Supply chain
- pandafortunerush (npm): malicious package fully compromises machines that install it; no safe version exists (no CVE) Critical · Supply chain
- internal-renderers (npm): malicious package compromises machines and steals secrets (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.