Threat Watch– active
All incidents
More on Threat Watch
More unknown attacker incidents
- Solana wallet stealer npm campaign: @johnruff215-dev/solana-wallet-tracker & @notrainer/nobtrainer-sdk exfiltrate wallet data via Discord webhook Critical · Supply chain
- self-v8 (npm): malicious info-stealer package exfiltrates host data to attacker Discord webhook Critical · Supply chain
- wallet-tracking PyPI package: cryptocurrency-wallet information stealer exfiltrating data via Discord webhook Critical · Supply chain
- Malicious npm package @axon-web/icons 99.0.0 leaks hostname, username via OAST DNS beacon Critical · Supply chain
- hs-framework (npm): malicious package installs remote tarball from attacker-controlled GCS bucket, executing arbitrary code on install Critical · Supply chain
- Malicious npm package local-commander-agent 0.3.52 fully compromises hosts Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.