Threat Watch– active
All incidents
More on Threat Watch
More npm registry incidents
- Malicious npm Baileys forks (@axo_cuy/baileys, @bil-rgb/baileys) pull unpinned GitHub libsignal dependency Critical · Supply chain
- Dependency-confusion PoC package: @mobile-platform/magnetic-components (npm) — preinstall script runs on install, phones home via DNS Medium · Supply chain
- hs-framework (npm): malicious package installs remote tarball from attacker-controlled GCS bucket, executing arbitrary code on install Critical · Supply chain
- Dependency-confusion beacon: @webapp-shared/login-vmok (npm) exfiltrates hostname and paths on install Critical · Supply chain
- csvflow-schema (npm): malicious postinstall beacon package removed from registry Critical · Supply chain
- adyen-web-v6 (npm): lookalike of Adyen's checkout SDK ships malware; full machine compromise Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.