Threat Watch– active
All incidents
More on Threat Watch
More Meta incidents
- @solana-common/utils npm package is malware — full machine compromise, no patched versions (GHSA-r533-jgcg-qr68) Critical · Supply chain
- @ethersphere/bee-js 13.3.0: malicious npm release steals Swarm wallet files and plants persistence Critical · Supply chain
- Fireworks AI: second breach via third-party cloud provider exposes customer billing data and model assets High · Breach
- PyPI packages qzc690382-385: install-time backdoor shells and host recon via Xinference API Critical · Supply chain
- Keplr / Web3Auth: attacker obtained private keys of Google/Apple-login wallets and stole funds High · Breach
- Open SMB file share: tobacco company — confidential product recipes exposed to any employee via unauthenticated Windows share; pen tester's finding denied then files removed Medium · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.