Threat Watch– active
All incidents
More on Threat Watch
More n incidents
- pyprig PyPI malware: trojanized Pydantic clone downloads and executes remote code on model initialization Critical · Supply chain
- Node-RED unauthenticated flow injection exploited to drop Linux bot on OT/ICS devices (CVE-2026-58115) Critical · Patch now
- @ifasn md-doc-mcp typosquat family: npm packages steal cloud IMDS credentials and exfiltrate to 121.199.24.94 Critical · Supply chain
- Levvicode npm malware campaign: levvleys, @levvicode/baileys, @levvicode/libsignal-node, aytidaoffc — malicious packages fully compromise hosts (no CVE) Critical · Supply chain
- pandafortunerush (npm): malicious package fully compromises machines that install it; no safe version exists (no CVE) Critical · Supply chain
- internal-renderers (npm): malicious package compromises machines and steals secrets (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.