Threat Watch– active
All incidents
More on Threat Watch
More GitHub incidents
- Malicious npm packages diezyx*-baileys / diezy-libsignal-node — full host compromise via embedded malware (no CVE) Critical · Supply chain
- Malware in stelar-sdk npm package — full host compromise, rotate all secrets Critical · Supply chain
- Malware in self-certificate npm package — full compromise of installed machines; rotate all secrets Critical · Supply chain
- Malicious npm package @go-gost/mcp-darwin-x64 — full system compromise on install (no CVE) Critical · Supply chain
- Malicious npm package 'solidty' (typo of Solidity) — full machine compromise on install Critical · Supply chain
- Malicious npm package npm-builderio-qwik-poc fully compromises installed machines Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.