Threat Watch– active
All incidents
More on Threat Watch
More unknown npm publishers incidents
- Malicious npm packages m98th, m98bet, 789bet, m98vip — full system compromise on install Critical · Supply chain
- Malicious npm packages csec-form-validator, csec-crypto-toolkit (and ccsec- typosquat variants) — full system compromise Critical · Supply chain
- Malicious npm packages: path-stream-utils-testmetest and @iobandamwer/native-helper — full system compromise on install (no CVE) Critical · Supply chain
- npm malware wave: @eforms/forms-api, jshelperdependenceny, @iobandamwer/cache-helper — malicious packages fully compromise hosts Critical · Supply chain
- npm malware wave: @flexmr/*, macro-kernel-record-reader +4 more; installed hosts compromised (no CVE) Critical · Supply chain · Closed
- npm malware wave: 10 packages incl. react-dropzone-v4 — full machine compromise Critical · Supply chain · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.