Threat Watch– active
All incidents
More on Threat Watch
More Command Code incidents
- gatepay-sdk-python (PyPI): malicious package exfiltrates host info on install/import (no CVE) Critical · Supply chain
- GENERIC-questionable-pentest typosquat campaign: gateio-ws / gateio-sdk / gateio-client / gateio-v4 (PyPI) exfiltrate env vars and host data on install Critical · Supply chain
- demo-pingtest-xyz (PyPI): malicious package exfiltrates host info on install/import (no CVE) Critical · Supply chain
- Malicious PyPI package xrfdc exfiltrates host info on install/import (no CVE) Critical · Supply chain
- trezortranslate (PyPI): malicious package exfiltrates host info on install/import (no CVE) Medium · Supply chain
- PyPI malware campaign 2026-11-testing1345: qap793gl4l — setup.py install hook downloads and runs remote RAT script (no CVE) Critical · Supply chain
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.