Threat Watch– active
All incidents
More on Threat Watch
More Near AI incidents
- fragment-api-py 14.4.2 backdoor: PyPI TON wallet drainer steals seed-wallet funds on client startup Critical · Supply chain
- Claude Code secrets leak — AI coding agent commits credentials to public GitHub repos (.claude/settings.local.json) High · Patch now
- 3AM ransomware (suspected AI-assisted): UK school estate, ~37 of 50 machines encrypted after AD changes High · Breach
- Beget: attackers with management access wiped VPS, S3 and Kubernetes data and binary backups High · Breach
- Dependency-confusion beacon packages: mw-communication-client, mw-test-utils, mui-wrapper-x-date-pickers exfiltrate user/host/cwd on install Critical · Supply chain
- Malicious npm packages csec-form-validator, csec-crypto-toolkit (and ccsec- typosquat variants) — full system compromise Critical · Supply chain · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.