Threat Watch– active
All incidents
More on Threat Watch
More unknown npm publishers incidents
- Malicious npm packages m98th, m98bet, 789bet, m98vip — full system compromise on install Critical · Supply chain
- npm typosquat malware: bcxhdh1kjlopsde & cjlowuxbnexkhgpzq — full machine compromise on install Critical · Supply chain
- Malicious npm packages csec-form-validator, csec-crypto-toolkit (and ccsec- typosquat variants) — full system compromise Critical · Supply chain
- Malicious npm packages: path-stream-utils-testmetest and @iobandamwer/native-helper — full system compromise on install (no CVE) Critical · Supply chain
- npm malware wave: @eforms/forms-api, jshelperdependenceny, @iobandamwer/cache-helper — malicious packages fully compromise hosts Critical · Supply chain
- npm malware wave: @flexmr/*, macro-kernel-record-reader +4 more; installed hosts compromised (no CVE) Critical · Supply chain · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.