Threat Watch– active
All incidents
More on Threat Watch
More unknown npm publishers incidents
- npm typosquat malware wave: bznio5, v36sl2, rtvu6h, ll3zea — full machine compromise on install Critical · Supply chain
- Malicious npm 'game hack generator' packages — full machine compromise on install (no CVE) Critical · Supply chain
- npm typosquat malware wave: k7nhgj, 9ct8bi, winjb6, 1b67v5 — full machine compromise on install Critical · Supply chain
- Malicious npm packages: tailwind-animate-test, tailwind-animate-final, tailwind-animatrix, tailwind-animate-engine — full system compromise on install Critical · Supply chain
- Malicious npm packages dependencykfeg, claims-acct-unlock, tefeest-npm-com-test, ssite-mock-server flagged as malware Critical · Supply chain
- Malicious npm packages m98th, m98bet, 789bet, m98vip — full system compromise on install Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.