Threat Watch– active
All incidents
More on Threat Watch
More unknown npm publishers incidents
- npm malware wave: archetype-index-sdk, file-saver-bg, react-bootstrap-table2-toolkit-bg, react-bootstrap-table-next-bg — full machine compromise Critical · Supply chain
- Malicious npm packages plain-lang and talk-lang flagged as malware — full system compromise Critical · Supply chain
- pino-testkit campaign: loader-utils-kit, pino-std, @k.vict1999/pino-std-serializers — malicious npm packages execute obfuscated code on install/import (no CVE) Critical · Supply chain
- npm typosquat malware wave: heheheshsds, thththtbhthhth, @saidddddddddd/* — malicious packages fully compromise installed machines (no CVE) Critical · Supply chain
- Malicious npm packages passwordcracker and passwordcrackv2 — full system compromise on install Critical · Supply chain
- npm typosquat malware wave: bznio5, v36sl2, rtvu6h, ll3zea — full machine compromise on install Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.