{"category":"supply-chain","changes":[{"body":null,"category":"supply-chain","date":"2026-10-30","incident":"malicious-pypi-packages-twitter-request-diagnostics-and-test-01-rafamarrara-learning-dc-backdoor-web-apps","incidentTitle":"Malicious PyPI packages twitter-request-diagnostics and test-01-rafamarrara-learning-dc backdoor web apps","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-w3jr-q4jr-xq95","status":"live","title":"Malicious PyPI packages twitter-request-diagnostics and test-01-rafamarrara-learning-dc backdoor web apps","url":"https://helix.ml/threat-watch/i/malicious-pypi-packages-twitter-request-diagnostics-and-test-01-rafamarrara-learning-dc-backdoor-web-apps"},{"body":"CrowdStrike says the VAPOR PANDA campaign is separate from Storm-0940's ARTEX activity, which suggests that several China-nexus actors have adopted the framework. See https://helix.ml/threat-watch/i/vapor-panda-china-nexus-used-artex-ai-agents-running-deepseek-to","category":"supply-chain","date":"2026-10-29","incident":"storm-0940-artex-ai-driven-supply-chain-attack-connectwise-cloud-backup-china-aligned-actor-compromised-m365-tenants-via","incidentTitle":"ARTEX AI-driven attacks: ConnectWise Cloud Backup supply-chain compromise and suspected same-actor 123 Reg breach (no CVE)","kind":"other","patchStatus":"no-fix-needed","severity":"high","sourceUrl":"https://www.crowdstrike.com/en-us/blog/vapor-panda-uses-artex-to-scale-global-campaign/","status":"live","title":"Related: CrowdStrike reports a second China-nexus actor, VAPOR PANDA, using ARTEX against 200+ organizations","url":"https://helix.ml/threat-watch/i/storm-0940-artex-ai-driven-supply-chain-attack-connectwise-cloud-backup-china-aligned-actor-compromised-m365-tenants-via"},{"body":"CrowdStrike says the VAPOR PANDA campaign is separate from Storm-0940's ARTEX activity, which suggests that several China-nexus actors have adopted the framework. See https://helix.ml/threat-watch/i/vapor-panda-china-nexus-used-artex-ai-agents-running-deepseek-to","category":"supply-chain","date":"2026-10-29","incident":"connectwise-cloud-backup-storm-0940-china-linked-used-stolen-app-credentials-and-ai-pentest-tool-artex-to-access-2-250-m","incidentTitle":"ConnectWise Cloud Backup: Storm-0940 (China-linked) used stolen app credentials and AI pentest tool ARTEX to access 2,250+ Microsoft 365 tenants","kind":"other","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://www.crowdstrike.com/en-us/blog/vapor-panda-uses-artex-to-scale-global-campaign/","status":"closed","title":"Related: CrowdStrike reports a second China-nexus actor, VAPOR PANDA, using ARTEX against 200+ organizations","url":"https://helix.ml/threat-watch/i/connectwise-cloud-backup-storm-0940-china-linked-used-stolen-app-credentials-and-ai-pentest-tool-artex-to-access-2-250-m"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malicious-npm-package-dowload-ebok-lolita-by-vladimir-nabokov-oy1gy-full-system-compromise-on-install","incidentTitle":"Malicious npm package dowload_ebok_lolita_by_vladimir_nabokov_oy1gy — full system compromise on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-cjmr-6xg2-vf8h","status":"live","title":"Malicious npm package dowload_ebok_lolita_by_vladimir_nabokov_oy1gy — full system compromise on install","url":"https://helix.ml/threat-watch/i/malicious-npm-package-dowload-ebok-lolita-by-vladimir-nabokov-oy1gy-full-system-compromise-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malicious-npm-package-dowload-ebok-el-piso-mil-el-piso-mil-1-by-katharine-mcgee-h1llc-full-system-compromise","incidentTitle":"Malicious npm package dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc — full system compromise","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-j272-m9j4-g3v9","status":"live","title":"Malicious npm package dowload_ebok_el_piso_mil_el_piso_mil_1_by_katharine_mcgee_h1llc — full system compromise","url":"https://helix.ml/threat-watch/i/malicious-npm-package-dowload-ebok-el-piso-mil-el-piso-mil-1-by-katharine-mcgee-h1llc-full-system-compromise"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malicious-npm-package-dowload-ebok-nur-mal-schnell-das-mammut-retten-by-knut-kruger-eva-schoffmann-davidov-ouz6t-fully-c","incidentTitle":"Malicious npm package dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t fully compromises hosts","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-5cmc-vx46-22wx","status":"live","title":"Malicious npm package dowload_ebok_nur_mal_schnell_das_mammut_retten_by_knut_kruger_eva_schoffmann_davidov_ouz6t fully compromises hosts","url":"https://helix.ml/threat-watch/i/malicious-npm-package-dowload-ebok-nur-mal-schnell-das-mammut-retten-by-knut-kruger-eva-schoffmann-davidov-ouz6t-fully-c"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malicious-npm-package-dowload-ebok-reiki-sviluppa-e-usa-lenergia-reiki-by-matt-harvey-9q55p-full-system-compromise","incidentTitle":"Malicious npm package dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p — full system compromise","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-h86m-7gvf-j79h","status":"live","title":"Malicious npm package dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p — full system compromise","url":"https://helix.ml/threat-watch/i/malicious-npm-package-dowload-ebok-reiki-sviluppa-e-usa-lenergia-reiki-by-matt-harvey-9q55p-full-system-compromise"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"npm-malware-dowload-ebok-armageddon-by-max-hastings-kv3s4-malicious-package-fully-compromises-installed-machines","incidentTitle":"npm malware: dowload_ebok_armageddon_by_max_hastings_kv3s4 — malicious package fully compromises installed machines","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-p6mc-228w-6q75","status":"live","title":"npm malware: dowload_ebok_armageddon_by_max_hastings_kv3s4 — malicious package fully compromises installed machines","url":"https://helix.ml/threat-watch/i/npm-malware-dowload-ebok-armageddon-by-max-hastings-kv3s4-malicious-package-fully-compromises-installed-machines"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"2026-10-bq-helix-recon-bq-helix-build-hook-6ade983e-bq-helix-recon-6ade983e-pypi-packages-infostealer-executes-on-instal","incidentTitle":"2026-10-bq-helix-recon: bq-helix-build-hook-6ade983e / bq-helix-recon-6ade983e PyPI packages — infostealer executes on install and every Python startup, exfiltrating credentials and cloud tokens","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-526r-6j5j-v9pv","status":"live","title":"2026-10-bq-helix-recon: bq-helix-build-hook-6ade983e / bq-helix-recon-6ade983e PyPI packages — infostealer executes on install and every Python startup, exfiltrating credentials and cloud tokens","url":"https://helix.ml/threat-watch/i/2026-10-bq-helix-recon-bq-helix-build-hook-6ade983e-bq-helix-recon-6ade983e-pypi-packages-infostealer-executes-on-instal"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malware-in-orderbook-volt-plugin-npm-package-full-machine-compromise","incidentTitle":"Malware in orderbook-volt-plugin npm package — full machine compromise","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-w9pq-6r9f-pj96","status":"live","title":"Malware in orderbook-volt-plugin npm package — full machine compromise","url":"https://helix.ml/threat-watch/i/malware-in-orderbook-volt-plugin-npm-package-full-machine-compromise"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malicious-npm-package-react-native-drago-callkit-full-system-compromise-on-install","incidentTitle":"Malicious npm package react-native-drago-callkit — full system compromise on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-jp74-4rg3-7ppj","status":"live","title":"Malicious npm package react-native-drago-callkit — full system compromise on install","url":"https://helix.ml/threat-watch/i/malicious-npm-package-react-native-drago-callkit-full-system-compromise-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malicious-npm-package-chatunitycenter-baileys-full-system-compromise-on-install","incidentTitle":"Malicious npm package @chatunitycenter/baileys — full system compromise on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-g6j7-j669-23g6","status":"live","title":"Malicious npm package @chatunitycenter/baileys — full system compromise on install","url":"https://helix.ml/threat-watch/i/malicious-npm-package-chatunitycenter-baileys-full-system-compromise-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malicious-npm-packages-m98th-m98bet-789bet-m98vip-full-system-compromise-on-install","incidentTitle":"Malicious npm packages m98th, m98bet, 789bet, m98vip — full system compromise on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-x82c-crm3-jcwv","status":"live","title":"Malicious npm packages m98th, m98bet, 789bet, m98vip — full system compromise on install","url":"https://helix.ml/threat-watch/i/malicious-npm-packages-m98th-m98bet-789bet-m98vip-full-system-compromise-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"spectral-core-npm-typosquat-install-time-script-steals-env-secrets-and-aws-metadata","incidentTitle":"spectral-core (npm) typosquat: install-time script steals env secrets and AWS metadata","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-jpgq-34qx-jwwc","status":"live","title":"spectral-core (npm) typosquat: install-time script steals env secrets and AWS metadata","url":"https://helix.ml/threat-watch/i/spectral-core-npm-typosquat-install-time-script-steals-env-secrets-and-aws-metadata"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"dmangal-curse-dependent-ecto-npm-malicious-install-time-script-exfiltrates-env-secrets-and-files-via-webhook-site","incidentTitle":"@dmangal/curse-dependent-ecto (npm): malicious install-time script exfiltrates env secrets and files via webhook.site","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-prqg-vvv3-2xf8","status":"live","title":"@dmangal/curse-dependent-ecto (npm): malicious install-time script exfiltrates env secrets and files via webhook.site","url":"https://helix.ml/threat-watch/i/dmangal-curse-dependent-ecto-npm-malicious-install-time-script-exfiltrates-env-secrets-and-files-via-webhook-site"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"poc-revshell-pypi-malicious-package-ships-reverse-shell-backdoor-triggered-on-pip-install-or-import-no-cve","incidentTitle":"poc-revshell (PyPI): malicious package ships reverse-shell backdoor triggered on pip install or import (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-h7h9-fmhv-56wh","status":"live","title":"poc-revshell (PyPI): malicious package ships reverse-shell backdoor triggered on pip install or import (no CVE)","url":"https://helix.ml/threat-watch/i/poc-revshell-pypi-malicious-package-ships-reverse-shell-backdoor-triggered-on-pip-install-or-import-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"black-spindle-2-npm-malicious-postinstall-beacon-exfiltrates-host-data-on-install-no-cve","incidentTitle":"black-spindle-2 (npm): malicious postinstall beacon exfiltrates host data on install (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-qcg8-4xw5-5ccq","status":"live","title":"black-spindle-2 (npm): malicious postinstall beacon exfiltrates host data on install (no CVE)","url":"https://helix.ml/threat-watch/i/black-spindle-2-npm-malicious-postinstall-beacon-exfiltrates-host-data-on-install-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"io-compress-brotli-perl-bundled-brotli-decoder-out-of-bounds-write-allows-memory-disclosure-crashes-or-potential-rce-whe","incidentTitle":"Node2Shell: Brotli decoder OOB write across Node.js, Python, Bun, .NET, Java, Envoy/Istio and Perl IO::Compress::Brotli enables RCE, memory disclosure or CPU pinning via crafted compressed streams (CVE-2026-111497)","kind":"disclosure","patchStatus":"partial","severity":"critical","sourceUrl":"https://securitylabs.datadoghq.com/articles/node2shell-cve-2026-111497-nodejs-brotli-decoder/","status":"live","title":"Node2Shell: CVE-2026-111497 Brotli OOB write reproduced in Node.js's bundled decoder, expanding affected products beyond Perl's IO::Compress::Brotli","url":"https://helix.ml/threat-watch/i/io-compress-brotli-perl-bundled-brotli-decoder-out-of-bounds-write-allows-memory-disclosure-crashes-or-potential-rce-whe"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"npm-typosquat-malware-bcxhdh1kjlopsde-cjlowuxbnexkhgpzq-full-machine-compromise-on-install","incidentTitle":"npm typosquat malware: bcxhdh1kjlopsde \u0026 cjlowuxbnexkhgpzq — full machine compromise on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-v78q-7787-v9rq","status":"live","title":"npm typosquat malware: bcxhdh1kjlopsde \u0026 cjlowuxbnexkhgpzq — full machine compromise on install","url":"https://helix.ml/threat-watch/i/npm-typosquat-malware-bcxhdh1kjlopsde-cjlowuxbnexkhgpzq-full-machine-compromise-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"npm-malware-wave-tailwindcss-theme-kit-noelc-css-blender-tailwind-base-buttons-malicious-packages-fully-compromise-insta","incidentTitle":"Tailwind npm malware wave: seven more malicious Tailwind/PostCSS animation packages fully compromise installed machines (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-282x-w96h-wv7f","status":"live","title":"Tailwind npm malware wave expands: seven more malicious Tailwind/PostCSS animation packages (tailwindcss-keyframe-kit, tailwindcss-animate-catalog, tailwind-animationlab, tailwind-keyframes, tailwind-animate-kit, tailwind-kinetic, @jasperquinn/postcss-motion-helpers) fully compromise installed machines","url":"https://helix.ml/threat-watch/i/npm-malware-wave-tailwindcss-theme-kit-noelc-css-blender-tailwind-base-buttons-malicious-packages-fully-compromise-insta"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"github-actions-issue-injection-supply-chain-campaign-61-public-repos-incl-trivy-mlflow-brave-langextract-hit-via-hidden","incidentTitle":"GitHub Actions issue-injection supply chain campaign — 61 public repos (incl. Trivy, MLflow, Brave, LangExtract) hit via hidden HTML-comment payloads in issues/PRs to steal CI/CD credentials","kind":"disclosure","patchStatus":"no-fix-needed","severity":"high","sourceUrl":"https://www.theregister.com/security/2026/10/29/attackers-turn-github-issues-into-supply-chain-campaign-against-61-public-repos-in-less-than-an-hour/5306153","status":"live","title":"GitHub Actions issue-injection supply chain campaign — 61 public repos (incl. Trivy, MLflow, Brave, LangExtract) hit via hidden HTML-comment payloads in issues/PRs to steal CI/CD credentials","url":"https://helix.ml/threat-watch/i/github-actions-issue-injection-supply-chain-campaign-61-public-repos-incl-trivy-mlflow-brave-langextract-hit-via-hidden"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"dependency-confusion-beacon-package-identity-two-factor-targets-coinbase-on-npm","incidentTitle":"Dependency-confusion beacon package identity-two-factor targets Coinbase on npm","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-2hrq-h3vj-5wxm","status":"live","title":"Dependency-confusion beacon package identity-two-factor targets Coinbase on npm","url":"https://helix.ml/threat-watch/i/dependency-confusion-beacon-package-identity-two-factor-targets-coinbase-on-npm"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"spectral-net-probe-npm-malicious-package-exfiltrates-local-file-contents-via-install-time-and-load-time-callbacks","incidentTitle":"spectral-net-probe (npm): malicious package exfiltrates local file contents via install-time and load-time callbacks","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-48mf-mvf8-x4v3","status":"live","title":"spectral-net-probe (npm): malicious package exfiltrates local file contents via install-time and load-time callbacks","url":"https://helix.ml/threat-watch/i/spectral-net-probe-npm-malicious-package-exfiltrates-local-file-contents-via-install-time-and-load-time-callbacks"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"dependency-confusion-beacon-packages-mw-communication-client-mw-test-utils-mui-wrapper-x-date-pickers-exfiltrate-user-ho","incidentTitle":"Dependency-confusion beacon packages: mw-communication-client, mw-test-utils, mui-wrapper-x-date-pickers exfiltrate user/host/cwd on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-4h9g-fh86-j87q","status":"live","title":"Dependency-confusion beacon packages: mw-communication-client, mw-test-utils, mui-wrapper-x-date-pickers exfiltrate user/host/cwd on install","url":"https://helix.ml/threat-watch/i/dependency-confusion-beacon-packages-mw-communication-client-mw-test-utils-mui-wrapper-x-date-pickers-exfiltrate-user-ho"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"dependency-confusion-malware-zmtcdn-components-and-zmtcdn-ui-npm-packages-exfiltrate-host-data-via-postinstall-script","incidentTitle":"Dependency-confusion malware: @zmtcdn/components and @zmtcdn/ui npm packages exfiltrate host data via postinstall script","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-2pph-m662-c8hg","status":"live","title":"Dependency-confusion malware: @zmtcdn/components and @zmtcdn/ui npm packages exfiltrate host data via postinstall script","url":"https://helix.ml/threat-watch/i/dependency-confusion-malware-zmtcdn-components-and-zmtcdn-ui-npm-packages-exfiltrate-host-data-via-postinstall-script"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malware-in-dsh-vm-tester-npm-package-full-machine-compromise-rotate-secrets-no-cve","incidentTitle":"dsh-* npm malware campaign: dsh-vm-tester, dsh-redteam-mode and dsh-volcengine-provider fully compromise installed machines; rotate secrets (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-8hr2-m7vq-fhpg","status":"live","title":"dsh-* npm malware campaign expands: dsh-volcengine-provider (~1,860 downloads/month) fully compromises installed machines","url":"https://helix.ml/threat-watch/i/malware-in-dsh-vm-tester-npm-package-full-machine-compromise-rotate-secrets-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"malware-in-dsh-vm-tester-npm-package-full-machine-compromise-rotate-secrets-no-cve","incidentTitle":"dsh-* npm malware campaign: dsh-vm-tester, dsh-redteam-mode and dsh-volcengine-provider fully compromise installed machines; rotate secrets (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-r4m9-8735-g966","status":"live","title":"Second malicious dsh-* package: dsh-redteam-mode (npm) fully compromises installed machines; rotate all secrets","url":"https://helix.ml/threat-watch/i/malware-in-dsh-vm-tester-npm-package-full-machine-compromise-rotate-secrets-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-29","incident":"searchjacked-319-malicious-chrome-extensions-hijack-searches-of-13-4m-users-monetize-via-yahoo-bing-referral-fraud","incidentTitle":"Searchjacked: 319 malicious Chrome extensions hijack searches of 13.4M users, monetize via Yahoo/Bing referral fraud","kind":"disclosure","patchStatus":"no-fix-needed","severity":"medium","sourceUrl":"https://socket.dev/blog/searchjacked?utm_medium=feed","status":"live","title":"Searchjacked: 319 malicious Chrome extensions hijack searches of 13.4M users, monetize via Yahoo/Bing referral fraud","url":"https://helix.ml/threat-watch/i/searchjacked-319-malicious-chrome-extensions-hijack-searches-of-13-4m-users-monetize-via-yahoo-bing-referral-fraud"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"b20miner-npm-package-malicious-cryptominer-backdoor-fully-compromises-installed-hosts-no-cve","incidentTitle":"b20miner npm package: malicious cryptominer backdoor fully compromises installed hosts (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-fw7x-6chc-4244","status":"live","title":"b20miner npm package: malicious cryptominer backdoor fully compromises installed hosts (no CVE)","url":"https://helix.ml/threat-watch/i/b20miner-npm-package-malicious-cryptominer-backdoor-fully-compromises-installed-hosts-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"ghostaction-github-supply-chain-campaign-steals-developer-secrets-and-pivots-to-cloud-access","incidentTitle":"GhostAction: GitHub supply-chain campaign steals developer secrets and pivots to cloud access","kind":"disclosure","patchStatus":"no-fix-needed","severity":"high","sourceUrl":"https://www.darkreading.com/application-security/ghostaction-hacking-wave-fizzles-attackers-github","status":"live","title":"GhostAction: GitHub supply-chain campaign steals developer secrets and pivots to cloud access","url":"https://helix.ml/threat-watch/i/ghostaction-github-supply-chain-campaign-steals-developer-secrets-and-pivots-to-cloud-access"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"zaip-ai-cli-npm-package-is-malware-full-machine-compromise-no-patched-versions-ghsa-ffq4-h5jm-8pqr","incidentTitle":"@zaip-ai/cli npm package is malware — full machine compromise, no patched versions (GHSA-ffq4-h5jm-8pqr)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-ffq4-h5jm-8pqr","status":"live","title":"@zaip-ai/cli npm package is malware — full machine compromise, no patched versions (GHSA-ffq4-h5jm-8pqr)","url":"https://helix.ml/threat-watch/i/zaip-ai-cli-npm-package-is-malware-full-machine-compromise-no-patched-versions-ghsa-ffq4-h5jm-8pqr"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"walknpm-todo-cli-npm-package-is-malware-full-machine-compromise-for-installers-of-v2-0-1-no-cve","incidentTitle":"@walknpm/todo-cli npm package is malware — full machine compromise for installers of v2.0.1 (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-p6gj-69gx-r376","status":"live","title":"@walknpm/todo-cli npm package is malware — full machine compromise for installers of v2.0.1 (no CVE)","url":"https://helix.ml/threat-watch/i/walknpm-todo-cli-npm-package-is-malware-full-machine-compromise-for-installers-of-v2-0-1-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"malicious-npm-package-dsh-plugin-blender-3d-full-machine-compromise-for-installers-no-cve","incidentTitle":"Malicious npm package dsh-plugin-blender-3d — full machine compromise for installers (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-hw9g-f63g-4c8x","status":"live","title":"Malicious npm package dsh-plugin-blender-3d — full machine compromise for installers (no CVE)","url":"https://helix.ml/threat-watch/i/malicious-npm-package-dsh-plugin-blender-3d-full-machine-compromise-for-installers-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"itsa-utils-itsa-react-checkbox-npm-packages-trojanized-with-malware-no-cve","incidentTitle":"itsa-utils / itsa-react-checkbox npm packages trojanized with malware (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-x788-rmcm-4x49","status":"live","title":"itsa-utils / itsa-react-checkbox npm packages trojanized with malware (no CVE)","url":"https://helix.ml/threat-watch/i/itsa-utils-itsa-react-checkbox-npm-packages-trojanized-with-malware-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"malicious-npm-package-mock-transactions-sdk-full-system-compromise-on-install","incidentTitle":"Malicious npm package mock-transactions-sdk — full system compromise on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-357r-x5jp-3p8f","status":"live","title":"Malicious npm package mock-transactions-sdk — full system compromise on install","url":"https://helix.ml/threat-watch/i/malicious-npm-package-mock-transactions-sdk-full-system-compromise-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"malicious-npm-package-transaction-info-generate-sdk-full-system-compromise-on-install-no-cve","incidentTitle":"Malicious npm package transaction-info-generate-sdk — full system compromise on install (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-23j5-jj88-v9f3","status":"live","title":"Malicious npm package transaction-info-generate-sdk — full system compromise on install (no CVE)","url":"https://helix.ml/threat-watch/i/malicious-npm-package-transaction-info-generate-sdk-full-system-compromise-on-install-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"my-empty-package-npm-malicious-package-compromises-machines-that-install-it","incidentTitle":"my-empty-package (npm): malicious package compromises machines that install it","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-39q9-338w-8vhv","status":"live","title":"my-empty-package (npm): malicious package compromises machines that install it","url":"https://helix.ml/threat-watch/i/my-empty-package-npm-malicious-package-compromises-machines-that-install-it"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"electron-compromised-emudhra-intermediate-certificates-allow-tls-server-impersonation-cve-2026-115570","incidentTitle":"Electron: compromised eMudhra intermediate certificates allow TLS server impersonation (CVE-2026-115570)","kind":"advisory","patchStatus":"patched","severity":"high","sourceUrl":"https://seclists.org/oss-sec/2026/q4/412","status":"live","title":"oss-security thread adds practical Python/pip detection guidance for the eMudhra/emSign CA compromise","url":"https://helix.ml/threat-watch/i/electron-compromised-emudhra-intermediate-certificates-allow-tls-server-impersonation-cve-2026-115570"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"camelotlabs-npm-packages-core-config-sdk-worker-published-as-malware-full-machine-compromise","incidentTitle":"camelotlabs npm packages (core, config, sdk, worker) published as malware — full machine compromise","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-pf82-f9wr-54vx","status":"live","title":"camelotlabs npm packages (core, config, sdk, worker) published as malware — full machine compromise","url":"https://helix.ml/threat-watch/i/camelotlabs-npm-packages-core-config-sdk-worker-published-as-malware-full-machine-compromise"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"storm-0940-artex-ai-driven-supply-chain-attack-connectwise-cloud-backup-china-aligned-actor-compromised-m365-tenants-via","incidentTitle":"ARTEX AI-driven attacks: ConnectWise Cloud Backup supply-chain compromise and suspected same-actor 123 Reg breach (no CVE)","kind":"victim","patchStatus":"no-fix-needed","severity":"high","sourceUrl":"https://www.theregister.com/cyber-crime/2026/10/28/123-reg-discloses-ai-cyberattack-on-customer-data-suspects-china-nexus/5305936","status":"live","title":"ARTEX actor suspected in 123 Reg 'AI cyberattack' on customer data, extending the campaign's victim footprint","url":"https://helix.ml/threat-watch/i/storm-0940-artex-ai-driven-supply-chain-attack-connectwise-cloud-backup-china-aligned-actor-compromised-m365-tenants-via"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"atlisp-mcp-npm-package-1-12-14-is-malware-full-machine-compromise-rotate-all-secrets","incidentTitle":"@atlisp/mcp npm package 1.12.14 is malware — full machine compromise, rotate all secrets","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-65cr-mcfq-59hh","status":"live","title":"@atlisp/mcp npm package 1.12.14 is malware — full machine compromise, rotate all secrets","url":"https://helix.ml/threat-watch/i/atlisp-mcp-npm-package-1-12-14-is-malware-full-machine-compromise-rotate-all-secrets"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"shai-hulud-worm-wave-2-testsecuiitytestme-cache-helper-npm-package-malicious-native-addon-loader-steals-credentials-no-c","incidentTitle":"Shai-Hulud worm wave 2: @testsecuiitytestme/cache-helper npm package — malicious native-addon loader steals credentials (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-4g45-28rv-vq9q","status":"live","title":"Shai-Hulud worm wave 2: @testsecuiitytestme/cache-helper npm package — malicious native-addon loader steals credentials (no CVE)","url":"https://helix.ml/threat-watch/i/shai-hulud-worm-wave-2-testsecuiitytestme-cache-helper-npm-package-malicious-native-addon-loader-steals-credentials-no-c"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"csvflow-schema-npm-malicious-postinstall-beacon-package-removed-from-registry","incidentTitle":"csvflow-schema (npm): malicious postinstall beacon package removed from registry","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-mhx4-6f72-5vf7","status":"live","title":"csvflow-schema (npm): malicious postinstall beacon package removed from registry","url":"https://helix.ml/threat-watch/i/csvflow-schema-npm-malicious-postinstall-beacon-package-removed-from-registry"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"dependency-confusion-beacon-webapp-shared-login-vmok-npm-exfiltrates-hostname-and-paths-on-install","incidentTitle":"Dependency-confusion beacon: @webapp-shared/login-vmok (npm) exfiltrates hostname and paths on install","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-cmqx-q58q-9m8p","status":"live","title":"Dependency-confusion beacon: @webapp-shared/login-vmok (npm) exfiltrates hostname and paths on install","url":"https://helix.ml/threat-watch/i/dependency-confusion-beacon-webapp-shared-login-vmok-npm-exfiltrates-hostname-and-paths-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"trajmetrics-pypi-malware-system-wide-file-scanning-and-exfiltration-via-background-job","incidentTitle":"trajmetrics PyPI malware: system-wide file scanning and exfiltration via background job","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-rm9p-x4m7-hxmp","status":"live","title":"trajmetrics PyPI malware: system-wide file scanning and exfiltration via background job","url":"https://helix.ml/threat-watch/i/trajmetrics-pypi-malware-system-wide-file-scanning-and-exfiltration-via-background-job"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"glyphmatrix-fixture-npm-malicious-package-versions-1-0-0-and-1-0-1-fully-compromise-installed-machines-no-cve","incidentTitle":"glyphmatrix-fixture (npm): malicious package versions 1.0.0 and 1.0.1 fully compromise installed machines (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-vc33-3x34-x6jm","status":"live","title":"glyphmatrix-fixture (npm): malicious package versions 1.0.0 and 1.0.1 fully compromise installed machines (no CVE)","url":"https://helix.ml/threat-watch/i/glyphmatrix-fixture-npm-malicious-package-versions-1-0-0-and-1-0-1-fully-compromise-installed-machines-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-28","incident":"electron-compromised-emudhra-intermediate-certificates-allow-tls-server-impersonation-cve-2026-115570","incidentTitle":"Electron: compromised eMudhra intermediate certificates allow TLS server impersonation (CVE-2026-115570)","kind":"disclosure","patchStatus":"patched","severity":"high","sourceUrl":"https://seclists.org/oss-sec/2026/q4/410","status":"live","title":"Follow-up questions raised about eMudhra/emSign CA incident macOS remediation guidance (PIP_CERT instructions) on oss-security","url":"https://helix.ml/threat-watch/i/electron-compromised-emudhra-intermediate-certificates-allow-tls-server-impersonation-cve-2026-115570"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-packages-csec-form-validator-csec-crypto-toolkit-and-ccsec-typosquat-variants-full-system-compromise","incidentTitle":"Malicious npm packages csec-form-validator, csec-crypto-toolkit (and ccsec- typosquat variants) — full system compromise","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-wh86-6qm8-xgw2","status":"live","title":"Malicious npm packages csec-form-validator, csec-crypto-toolkit (and ccsec- typosquat variants) — full system compromise","url":"https://helix.ml/threat-watch/i/malicious-npm-packages-csec-form-validator-csec-crypto-toolkit-and-ccsec-typosquat-variants-full-system-compromise"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"agentenact-npm-malicious-package-0-2-0-fully-compromises-machines-that-install-it-no-cve","incidentTitle":"agentenact (npm): malicious package 0.2.0 fully compromises machines that install it (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-7p7m-8jmq-qp93","status":"live","title":"agentenact (npm): malicious package 0.2.0 fully compromises machines that install it (no CVE)","url":"https://helix.ml/threat-watch/i/agentenact-npm-malicious-package-0-2-0-fully-compromises-machines-that-install-it-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"mlflow-third-party-scorer-deserialization-rce-unauthenticated-code-execution-on-mlflow-servers-cve-2026-116692","incidentTitle":"MLflow third-party scorer deserialization RCE — unauthenticated code execution on MLflow servers (CVE-2026-116692)","kind":"disclosure","patchStatus":"patched","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-26p8-2jq9-3vq9","status":"live","title":"MLflow third-party scorer deserialization RCE — unauthenticated code execution on MLflow servers (CVE-2026-116692)","url":"https://helix.ml/threat-watch/i/mlflow-third-party-scorer-deserialization-rce-unauthenticated-code-execution-on-mlflow-servers-cve-2026-116692"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"malware-in-dsh-vm-tester-npm-package-full-machine-compromise-rotate-secrets-no-cve","incidentTitle":"dsh-* npm malware campaign: dsh-vm-tester, dsh-redteam-mode and dsh-volcengine-provider fully compromise installed machines; rotate secrets (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-84fw-gj66-p5v3","status":"live","title":"Malware in dsh-vm-tester npm package — full machine compromise; rotate secrets (no CVE)","url":"https://helix.ml/threat-watch/i/malware-in-dsh-vm-tester-npm-package-full-machine-compromise-rotate-secrets-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"malicious-firefox-wallet-impersonators-phantom-jupiter-bitget-steal-recovery-phrases-and-private-keys-via-bonto-io-c2","incidentTitle":"Malicious Firefox wallet impersonators (Phantom/Jupiter/Bitget) — steal recovery phrases and private keys via bonto[.]io C2","kind":"disclosure","patchStatus":"no-fix-needed","severity":"high","sourceUrl":"https://socket.dev/blog/firefox-wallet-impersonators?utm_medium=feed","status":"live","title":"Malicious Firefox wallet impersonators (Phantom/Jupiter/Bitget) — steal recovery phrases and private keys via bonto[.]io C2","url":"https://helix.ml/threat-watch/i/malicious-firefox-wallet-impersonators-phantom-jupiter-bitget-steal-recovery-phrases-and-private-keys-via-bonto-io-c2"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"2026-10-numprint-pypi-package-numprint-malicious-install-time-rat-executing-attacker-commands-via-github-gist-c2","incidentTitle":"2026-10-numprint: PyPI package numprint — malicious install-time RAT executing attacker commands via GitHub Gist C2","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-g9fj-q87h-6h4c","status":"live","title":"2026-10-numprint: PyPI package numprint — malicious install-time RAT executing attacker commands via GitHub Gist C2","url":"https://helix.ml/threat-watch/i/2026-10-numprint-pypi-package-numprint-malicious-install-time-rat-executing-attacker-commands-via-github-gist-c2"},{"body":"Registry time map shows a staging entry at 15:10:59 UTC and a 0.0.1-security placeholder at 15:12:17 UTC, both published by npm. Only the placeholder is listed as a version now.","category":"supply-chain","date":"2026-10-27","incident":"paychex-pdftron-npm-package-is-malware-full-machine-compromise-no-safe-version","incidentTitle":"paychex-pdftron (npm): impersonation stub pulls an unpinned remote tarball on install; no safe version","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/paychex-pdftron","status":"live","title":"npm removed the malicious version and replaced the package with a security placeholder","url":"https://helix.ml/threat-watch/i/paychex-pdftron-npm-package-is-malware-full-machine-compromise-no-safe-version"},{"body":"Each name now carries a 0.0.1-security version published by the npm security-holder account between 15:49 and 16:29 UTC on 2026-10-27, and the malicious versions are no longer listed in the registry. Registry state is a snapshot; removal of the tarballs is not the same as cleanup on affected hosts.","category":"supply-chain","date":"2026-10-27","incident":"npm-malware-wave-macro-kernel-record-reader-flexmr-survey-client-flexmr-utils-fetch-hash-cache-atomic-full-compromise-of","incidentTitle":"npm malware wave: @flexmr/*, macro-kernel-record-reader +4 more; installed hosts compromised (no CVE)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/6161test1234","status":"closed","title":"npm replaced all eight names with 0.0.1-security placeholders","url":"https://helix.ml/threat-watch/i/npm-malware-wave-macro-kernel-record-reader-flexmr-survey-client-flexmr-utils-fetch-hash-cache-atomic-full-compromise-of"},{"body":"GitHub published advisories GHSA-32g3-f74c-pcxq, GHSA-6crh-vwr2-4qfp, GHSA-hc8w-gq4q-fr74, GHSA-hpc9-fxqh-hhf8, GHSA-r9qx-xcg2-7wcc, GHSA-rh7q-f888-q36c, GHSA-w9mp-cvjp-jfqp and GHSA-wfcx-722r-fg5h, all as CWE-506 malware with no safe version.","category":"supply-chain","date":"2026-10-27","incident":"npm-malware-wave-macro-kernel-record-reader-flexmr-survey-client-flexmr-utils-fetch-hash-cache-atomic-full-compromise-of","incidentTitle":"npm malware wave: @flexmr/*, macro-kernel-record-reader +4 more; installed hosts compromised (no CVE)","kind":"advisory","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-32g3-f74c-pcxq","status":"closed","title":"Eight GitHub malware advisories published","url":"https://helix.ml/threat-watch/i/npm-malware-wave-macro-kernel-record-reader-flexmr-survey-client-flexmr-utils-fetch-hash-cache-atomic-full-compromise-of"},{"body":"GitHub published GHSA-wmfr-2pvv-wmf3 as critical malware (CWE-506) at 16:05 UTC on 2026-10-27.","category":"supply-chain","date":"2026-10-27","incident":"npm-malware-tableau-catalog-messages-database-lower-malicious-package-compromises-any-machine-where-installed-no-cve","incidentTitle":"npm malware: @tableau__catalog-messages/database_lower contacts a malicious domain (no CVE)","kind":"advisory","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-wmfr-2pvv-wmf3","status":"closed","title":"GitHub advisory GHSA-wmfr-2pvv-wmf3 published","url":"https://helix.ml/threat-watch/i/npm-malware-tableau-catalog-messages-database-lower-malicious-package-compromises-any-machine-where-installed-no-cve"},{"body":"npm published a 0.0.1-security version under the npm-support account at 16:04 UTC on 2026-10-27. The malicious versions are no longer listed.","category":"supply-chain","date":"2026-10-27","incident":"npm-malware-tableau-catalog-messages-database-lower-malicious-package-compromises-any-machine-where-installed-no-cve","incidentTitle":"npm malware: @tableau__catalog-messages/database_lower contacts a malicious domain (no CVE)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/@tableau__catalog-messages%2fdatabase_lower","status":"closed","title":"npm replaced the name with a 0.0.1-security placeholder","url":"https://helix.ml/threat-watch/i/npm-malware-tableau-catalog-messages-database-lower-malicious-package-compromises-any-machine-where-installed-no-cve"},{"body":"Registry time map shows a staging entry at 15:11:06 UTC and a 0.0.1-security placeholder at 15:13:46 UTC, published by npm.","category":"supply-chain","date":"2026-10-27","incident":"malware-in-sc-announcer-npm-package-full-system-compromise-no-safe-version","incidentTitle":"sc-announcer (npm) 99.9.1: stub fetches off-registry tarball on install; full compromise, no safe version","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/sc-announcer","status":"live","title":"npm replaced sc-announcer with a security placeholder","url":"https://helix.ml/threat-watch/i/malware-in-sc-announcer-npm-package-full-system-compromise-no-safe-version"},{"body":"Registry time map shows a staging entry at 15:11:12 UTC and a 0.0.1-security placeholder at 15:13:21 UTC, published by npm.","category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-package-sc-hydrate-carousel-price-full-system-compromise-on-install-no-cve","incidentTitle":"sc-hydrate-carousel-price (npm) 99.9.1: stub fetches an off-registry tarball on install; no safe version","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/sc-hydrate-carousel-price","status":"live","title":"npm replaced sc-hydrate-carousel-price with a security placeholder","url":"https://helix.ml/threat-watch/i/malicious-npm-package-sc-hydrate-carousel-price-full-system-compromise-on-install-no-cve"},{"body":"GitHub published GHSA-hh3m-f424-g8v5 as critical malware (CWE-506) at 15:12 UTC on 2026-10-27.","category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-package-ccl-global-shopping-full-system-compromise-on-install-no-cve","incidentTitle":"Malicious npm package ccl-global-shopping — full system compromise on install (no CVE)","kind":"advisory","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-hh3m-f424-g8v5","status":"live","title":"GitHub advisory GHSA-hh3m-f424-g8v5 published","url":"https://helix.ml/threat-watch/i/malicious-npm-package-ccl-global-shopping-full-system-compromise-on-install-no-cve"},{"body":"npm published a 0.0.1-security version under the npm account at 15:13 UTC on 2026-10-27.","category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-package-ccl-global-shopping-full-system-compromise-on-install-no-cve","incidentTitle":"Malicious npm package ccl-global-shopping — full system compromise on install (no CVE)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/ccl-global-shopping","status":"live","title":"npm replaced the name with a 0.0.1-security placeholder","url":"https://helix.ml/threat-watch/i/malicious-npm-package-ccl-global-shopping-full-system-compromise-on-install-no-cve"},{"body":"Registry time map records 1.6.2 at 15:57 UTC and it is now the latest tag. Published after the malware advisory; no source confirms its contents.","category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-package-camera-ui-camera-ui-nvr-windows-amd64-1-6-1-fully-compromises-hosts","incidentTitle":"@camera.ui/camera-ui-nvr-windows-amd64 1.6.1: malicious release in a real package line; full host compromise","kind":"other","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/@camera.ui%2fcamera-ui-nvr-windows-amd64","status":"live","title":"Version 1.6.2 published to npm under the same scope; not verified safe","url":"https://helix.ml/threat-watch/i/malicious-npm-package-camera-ui-camera-ui-nvr-windows-amd64-1-6-1-fully-compromises-hosts"},{"body":"Registry time map shows a staging entry at 16:23:23 UTC and a 0.0.1-security placeholder at 16:31:33 UTC, published by npm. Only the placeholder is listed as a version now.","category":"supply-chain","date":"2026-10-27","incident":"adyen-web-v6-npm-package-is-malware-full-machine-compromise-rotate-all-secrets","incidentTitle":"adyen-web-v6 (npm): lookalike of Adyen's checkout SDK ships malware; full machine compromise","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/adyen-web-v6","status":"live","title":"npm replaced adyen-web-v6 with a security placeholder","url":"https://helix.ml/threat-watch/i/adyen-web-v6-npm-package-is-malware-full-machine-compromise-rotate-all-secrets"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"adyen-web-v6-npm-package-is-malware-full-machine-compromise-rotate-all-secrets","incidentTitle":"adyen-web-v6 (npm): lookalike of Adyen's checkout SDK ships malware; full machine compromise","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-r77r-rw3m-rjh5","status":"live","title":"adyen-web-v6 npm package is malware — full machine compromise; rotate all secrets","url":"https://helix.ml/threat-watch/i/adyen-web-v6-npm-package-is-malware-full-machine-compromise-rotate-all-secrets"},{"body":"GitHub Advisory Database published GHSA-wmfr-2pvv-wmf3 on 2026-10-27, flagging all versions of @tableau__catalog-messages/database_lower as malware with no safe version.","category":"supply-chain","date":"2026-10-27","incident":"npm-malware-tableau-catalog-messages-database-lower-malicious-package-compromises-any-machine-where-installed-no-cve","incidentTitle":"npm malware: @tableau__catalog-messages/database_lower contacts a malicious domain (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-wmfr-2pvv-wmf3","status":"closed","title":"GitHub publishes malware advisory GHSA-wmfr-2pvv-wmf3","url":"https://helix.ml/threat-watch/i/npm-malware-tableau-catalog-messages-database-lower-malicious-package-compromises-any-machine-where-installed-no-cve"},{"body":"GitHub Advisory Database published eight CWE-506 malware advisories on 2026-10-27, covering macro-kernel-record-reader, @flexmr/survey-client, @flexmr/utils, @flexmr/survey-conversation, fetch-hash-cache-atomic, string-target-mapper-hash, buttoncontent and 6161test1234.","category":"supply-chain","date":"2026-10-27","incident":"npm-malware-wave-macro-kernel-record-reader-flexmr-survey-client-flexmr-utils-fetch-hash-cache-atomic-full-compromise-of","incidentTitle":"npm malware wave: @flexmr/*, macro-kernel-record-reader +4 more; installed hosts compromised (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-32g3-f74c-pcxq","status":"closed","title":"GitHub publishes eight malware advisories for npm names in this wave","url":"https://helix.ml/threat-watch/i/npm-malware-wave-macro-kernel-record-reader-flexmr-survey-client-flexmr-utils-fetch-hash-cache-atomic-full-compromise-of"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"paychex-pdftron-npm-package-is-malware-full-machine-compromise-no-safe-version","incidentTitle":"paychex-pdftron (npm): impersonation stub pulls an unpinned remote tarball on install; no safe version","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-9mgv-25w8-jwhf","status":"live","title":"paychex-pdftron npm package is malware — full machine compromise, no safe version","url":"https://helix.ml/threat-watch/i/paychex-pdftron-npm-package-is-malware-full-machine-compromise-no-safe-version"},{"body":"GitHub advisory GHSA-fxw2-4j5q-6hwg published. Critical; the only version, 99.9.1, is malicious and no patched version exists.","category":"supply-chain","date":"2026-10-27","incident":"malware-in-sc-announcer-npm-package-full-system-compromise-no-safe-version","incidentTitle":"sc-announcer (npm) 99.9.1: stub fetches off-registry tarball on install; full compromise, no safe version","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-fxw2-4j5q-6hwg","status":"live","title":"sc-announcer (npm) 99.9.1: stub fetches off-registry tarball on install; full compromise, no safe version","url":"https://helix.ml/threat-watch/i/malware-in-sc-announcer-npm-package-full-system-compromise-no-safe-version"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-package-ccl-global-shopping-full-system-compromise-on-install-no-cve","incidentTitle":"Malicious npm package ccl-global-shopping — full system compromise on install (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-hh3m-f424-g8v5","status":"live","title":"Malicious npm package ccl-global-shopping — full system compromise on install (no CVE)","url":"https://helix.ml/threat-watch/i/malicious-npm-package-ccl-global-shopping-full-system-compromise-on-install-no-cve"},{"body":"GitHub advisory GHSA-9gcx-88qx-rxch published. Critical; the only version, 99.9.1, is malicious and no patched version exists.","category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-package-sc-hydrate-carousel-price-full-system-compromise-on-install-no-cve","incidentTitle":"sc-hydrate-carousel-price (npm) 99.9.1: stub fetches an off-registry tarball on install; no safe version","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-9gcx-88qx-rxch","status":"live","title":"sc-hydrate-carousel-price (npm) 99.9.1: stub fetches an off-registry tarball on install; no safe version","url":"https://helix.ml/threat-watch/i/malicious-npm-package-sc-hydrate-carousel-price-full-system-compromise-on-install-no-cve"},{"body":null,"category":"supply-chain","date":"2026-10-27","incident":"malicious-npm-package-camera-ui-camera-ui-nvr-windows-amd64-1-6-1-fully-compromises-hosts","incidentTitle":"@camera.ui/camera-ui-nvr-windows-amd64 1.6.1: malicious release in a real package line; full host compromise","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-2w7v-jwxh-w7wc","status":"live","title":"Malicious npm package @camera.ui/camera-ui-nvr-windows-amd64 1.6.1 fully compromises hosts","url":"https://helix.ml/threat-watch/i/malicious-npm-package-camera-ui-camera-ui-nvr-windows-amd64-1-6-1-fully-compromises-hosts"},{"body":"Malware advisory for the single malicious version 0.1.0, classed CWE-506 with no fixed version. GitHub published it at 2026-10-27T06:31:22Z, after the OpenSSF entry MAL-2026-18336 at 2026-10-27T03:49:17Z.","category":"supply-chain","date":"2026-10-27","incident":"h13t0ry-hello-demo-pypi-malicious-package-spawns-reverse-shell-on-import-giving-attackers-full-command-execution","incidentTitle":"h13t0ry-hello-demo (PyPI): malicious package spawns reverse shell on import, giving attackers full command execution","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-5crq-52j9-fc74","status":"live","title":"GitHub Advisory Database publishes GHSA-5crq-52j9-fc74 for h13t0ry-hello-demo 0.1.0","url":"https://helix.ml/threat-watch/i/h13t0ry-hello-demo-pypi-malicious-package-spawns-reverse-shell-on-import-giving-attackers-full-command-execution"},{"body":"The registry still keeps their publish times (06:11 and 08:52 UTC) but no version entries. The package metadata was last modified at 10:42:07 UTC, in the same window as the advisory update at 10:42:27 UTC. Metadata does not show who removed them.","category":"supply-chain","date":"2026-10-26","incident":"worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve","incidentTitle":"@worca/app npm: malicious 1.14.0-rc.2 and 1.14.0-rc.4 fully compromise installed machines (no CVE)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/@worca/app","status":"live","title":"rc.2 and rc.4 no longer listed in the npm registry version list","url":"https://helix.ml/threat-watch/i/worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve"},{"body":"Registry time 09:16:19 UTC, with a provenance attestation linking it to commit dbd969eb4c. Its parent is the rc.4 commit, and the only changed files relative to rc.4 are the version strings in package.json and package-lock.json.","category":"supply-chain","date":"2026-10-26","incident":"worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve","incidentTitle":"@worca/app npm: malicious 1.14.0-rc.2 and 1.14.0-rc.4 fully compromise installed machines (no CVE)","kind":"other","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/SinishaDjukic/worca-cc/actions/runs/40296717645","status":"live","title":"@worca/app 1.14.0 published to npm (not flagged)","url":"https://helix.ml/threat-watch/i/worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve"},{"body":"Publish step logged 08:48 UTC with npm publish --provenance; provenance was written to the Sigstore transparency log (entry 3482609840). Registry time 08:52:59 UTC.","category":"supply-chain","date":"2026-10-26","incident":"worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve","incidentTitle":"@worca/app npm: malicious 1.14.0-rc.2 and 1.14.0-rc.4 fully compromise installed machines (no CVE)","kind":"other","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/SinishaDjukic/worca-cc/actions/runs/40293862291","status":"live","title":"@worca/app 1.14.0-rc.4 published to npm by the release workflow with a signed provenance statement","url":"https://helix.ml/threat-watch/i/worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve"},{"body":"Registry time 06:11:43 UTC. The tag was pushed at 05:58:48 UTC under the maintainer's GitHub account; the workflow ran with npm trusted publishing (OIDC).","category":"supply-chain","date":"2026-10-26","incident":"worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve","incidentTitle":"@worca/app npm: malicious 1.14.0-rc.2 and 1.14.0-rc.4 fully compromise installed machines (no CVE)","kind":"other","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/SinishaDjukic/worca-cc/actions/runs/40277184843","status":"live","title":"@worca/app 1.14.0-rc.2 published to npm by the release workflow","url":"https://helix.ml/threat-watch/i/worca-app-npm-package-malicious-code-in-1-14-0-rc-2-fully-compromises-installed-machines-no-cve"},{"body":"Placeholder published 00:11:06 UTC on 2026-10-26, about two minutes before GHSA publication. The 1.0.0 version is no longer listed.","category":"supply-chain","date":"2026-10-26","incident":"s4yhiitestpoc-npm-malware-malicious-scan-packages-fully-compromise-installed-machines","incidentTitle":"@s4yhiitestpoc npm malware: malicious scan-* packages fully compromise installed machines","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/@s4yhiitestpoc%2fr2-https-b","status":"closed","title":"npm replaced @s4yhiitestpoc/r2-https-b with its security placeholder 0.0.1-security","url":"https://helix.ml/threat-watch/i/s4yhiitestpoc-npm-malware-malicious-scan-packages-fully-compromise-installed-machines"},{"body":"Placeholder versions published between 00:10 and 00:13 UTC on 2026-10-26, before GHSA publication at 00:13 UTC. The 1.0.0 versions are no longer listed in the registry.","category":"supply-chain","date":"2026-10-26","incident":"s4yhiitestpoc-npm-malware-malicious-scan-packages-fully-compromise-installed-machines","incidentTitle":"@s4yhiitestpoc npm malware: malicious scan-* packages fully compromise installed machines","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/@s4yhiitestpoc%2fscan-echo-b","status":"closed","title":"npm replaced the scan-* and r2-* packages with its security placeholder 0.0.1-security","url":"https://helix.ml/threat-watch/i/s4yhiitestpoc-npm-malware-malicious-scan-packages-fully-compromise-installed-machines"},{"body":"Malware advisory (CWE-506, no fix) for claudeopusfile 0.1.1 and 0.1.2. This is the advisory that the duplicate record carried.","category":"supply-chain","date":"2026-10-26","incident":"pypi-typosquat-infostealer-campaign-donutautosellsrc-claudeopuseni-claudeopusenifile-dictmerge-lite-malicious-packages-s","incidentTitle":"PyPI donutautosellsrc: claudeopuseni, claudeopusenifile, claudeopusfile run staged infostealer (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-jgm6-7jxr-97gx","status":"live","title":"GitHub advisory GHSA-jgm6-7jxr-97gx published for claudeopusfile","url":"https://helix.ml/threat-watch/i/pypi-typosquat-infostealer-campaign-donutautosellsrc-claudeopuseni-claudeopusenifile-dictmerge-lite-malicious-packages-s"},{"body":"The 0.0.1-security placeholder was published at 01:06:19 UTC on 2026-10-26, after the 0.0.0-stage entry at 01:05:42 UTC. The malicious 1.0.x versions are no longer listed in the registry.","category":"supply-chain","date":"2026-10-26","incident":"orderly-plugin-liquidity-heatmap-npm-malicious-package-fully-compromises-machines-that-install-it-no-cve","incidentTitle":"orderly-plugin-liquidity-heatmap (npm): malicious package fully compromises machines that install it (no CVE)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/orderly-plugin-liquidity-heatmap","status":"closed","title":"npm replaced orderly-plugin-liquidity-heatmap with a security placeholder","url":"https://helix.ml/threat-watch/i/orderly-plugin-liquidity-heatmap-npm-malicious-package-fully-compromises-machines-that-install-it-no-cve"},{"body":"The 1.6.1 publish time is still in the registry history, but the version is absent from the version list. The package metadata was last modified at 02:39:49 UTC, the same time the GitHub advisory was published. Metadata does not show who removed it.","category":"supply-chain","date":"2026-10-26","incident":"numbors-npm-package-1-6-1-is-malware-full-machine-compromise-rotate-secrets","incidentTitle":"numbors npm package 1.6.1 is malware — full machine compromise; rotate secrets","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/numbors","status":"live","title":"numbors 1.6.1 no longer listed in the npm registry","url":"https://helix.ml/threat-watch/i/numbors-npm-package-1-6-1-is-malware-full-machine-compromise-rotate-secrets"},{"body":"npm registry records 0.0.1-security placeholders for these packages between 01:19 and 01:38 UTC on 2026-10-26 (earliest css-grid-snap-util and css-hnhxwd-polyfill at 01:33; latest bow-test at 01:38). Removal from the registry is the takedown event, not proof that installed copies are gone.","category":"supply-chain","date":"2026-10-26","incident":"npm-malware-wave-react-dropzone-v4-ap3-foundations-ui-css-grid-snap-util-regex33-hackerone-tb-compat-full-machine-compro","incidentTitle":"npm malware wave: 10 packages incl. react-dropzone-v4 — full machine compromise","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/bow-test","status":"closed","title":"npm replaces all ten packages with a security placeholder","url":"https://helix.ml/threat-watch/i/npm-malware-wave-react-dropzone-v4-ap3-foundations-ui-css-grid-snap-util-regex33-hackerone-tb-compat-full-machine-compro"},{"body":"npm registry records 0.0.1-security placeholders for @eforms/forms-api and jshelperdependenceny at 16:23 UTC and for @iobandamwer/cache-helper at 16:27 UTC on 2026-10-26.","category":"supply-chain","date":"2026-10-26","incident":"npm-malware-wave-eforms-forms-api-jshelperdependenceny-iobandamwer-cache-helper-malicious-packages-fully-compromise-host","incidentTitle":"npm malware wave: @eforms/forms-api, jshelperdependenceny, @iobandamwer/cache-helper — malicious packages fully compromise hosts","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/@iobandamwer%2Fcache-helper","status":"live","title":"npm replaces the three packages with a security placeholder","url":"https://helix.ml/threat-watch/i/npm-malware-wave-eforms-forms-api-jshelperdependenceny-iobandamwer-cache-helper-malicious-packages-fully-compromise-host"},{"body":"npm registry records 0.0.1-security at 00:09 UTC on 2026-10-26, the first GitHub advisory for the package (GHSA-fvjv-j94x-c8wm) was published at 00:08 UTC the same day.","category":"supply-chain","date":"2026-10-26","incident":"malware-in-monitoring-agent-npm-package-full-system-compromise-rotate-all-secrets","incidentTitle":"monitoring-agent (npm): malicious 1.0.1 posts request data and credentials to a hardcoded server (no fix)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/monitoring-agent","status":"closed","title":"npm replaces monitoring-agent with a security placeholder","url":"https://helix.ml/threat-watch/i/malware-in-monitoring-agent-npm-package-full-system-compromise-rotate-all-secrets"},{"body":"npm registry records 0.0.1-security placeholders for both packages at 16:28 UTC on 2026-10-26.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-packages-path-stream-utils-testmetest-and-iobandamwer-native-helper-full-system-compromise-on-install-no-c","incidentTitle":"Malicious npm packages: path-stream-utils-testmetest and @iobandamwer/native-helper — full system compromise on install (no CVE)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/path-stream-utils-testmetest","status":"live","title":"npm replaces both packages with a security placeholder","url":"https://helix.ml/threat-watch/i/malicious-npm-packages-path-stream-utils-testmetest-and-iobandamwer-native-helper-full-system-compromise-on-install-no-c"},{"body":"npm registry shows path-stream-utils-testmetest 0.0.3 at 10:26 UTC and 0.0.4 at 10:36 UTC, and @iobandamwer/native-helper 0.0.2 at 10:28 UTC on 2026-10-26.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-packages-path-stream-utils-testmetest-and-iobandamwer-native-helper-full-system-compromise-on-install-no-c","incidentTitle":"Malicious npm packages: path-stream-utils-testmetest and @iobandamwer/native-helper — full system compromise on install (no CVE)","kind":"other","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://api.osv.dev/v1/vulns/MAL-2026-18333","status":"live","title":"Later malicious versions published (0.0.3, 0.0.4, native-helper 0.0.2)","url":"https://helix.ml/threat-watch/i/malicious-npm-packages-path-stream-utils-testmetest-and-iobandamwer-native-helper-full-system-compromise-on-install-no-c"},{"body":"Placeholders were published under the npm account between 16:17 and 16:19 UTC on 2026-10-26.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-packages-harlow-css-mixer-birch-css-utils-postcss-semantic-themes-full-system-compromise","incidentTitle":"Malicious npm packages: harlow-css-mixer, birch-css-utils, postcss-semantic-themes — full system compromise","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/harlow-css-mixer","status":"live","title":"npm replaced all three names with 0.0.1-security placeholders","url":"https://helix.ml/threat-watch/i/malicious-npm-packages-harlow-css-mixer-birch-css-utils-postcss-semantic-themes-full-system-compromise"},{"body":"GitHub published three critical CWE-506 malware advisories on 2026-10-26, one per package, with no safe version.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-packages-harlow-css-mixer-birch-css-utils-postcss-semantic-themes-full-system-compromise","incidentTitle":"Malicious npm packages: harlow-css-mixer, birch-css-utils, postcss-semantic-themes — full system compromise","kind":"advisory","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-p597-2ggw-c82r","status":"live","title":"GitHub advisories GHSA-j658-c56g-qxh4, GHSA-p597-2ggw-c82r and GHSA-fh55-fq5h-h352 published","url":"https://helix.ml/threat-watch/i/malicious-npm-packages-harlow-css-mixer-birch-css-utils-postcss-semantic-themes-full-system-compromise"},{"body":"OSV MAL-2026-18331 and MAL-2026-18334 were published on 2026-10-26. The detail text describes a CSS-theme-kit lure, install through a Tailwind alias for birch-css-utils, and obfuscated cache-*.mjs modules that execute on require or import for postcss-semantic-themes.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-packages-harlow-css-mixer-birch-css-utils-postcss-semantic-themes-full-system-compromise","incidentTitle":"Malicious npm packages: harlow-css-mixer, birch-css-utils, postcss-semantic-themes — full system compromise","kind":"advisory","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://api.osv.dev/v1/vulns/MAL-2026-18331","status":"live","title":"OSV malware records published for birch-css-utils and postcss-semantic-themes","url":"https://helix.ml/threat-watch/i/malicious-npm-packages-harlow-css-mixer-birch-css-utils-postcss-semantic-themes-full-system-compromise"},{"body":"GitHub published GHSA-2j3v-rjgw-5wgg as critical malware (CWE-506) for ctf-agent = 0.1.0 on 2026-10-26, with no patched version.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install","incidentTitle":"Malicious npm package ctf-agent 0.1.0 — installed machines must be treated as compromised (no CVE)","kind":"advisory","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-2j3v-rjgw-5wgg","status":"live","title":"GitHub advisory GHSA-2j3v-rjgw-5wgg published","url":"https://helix.ml/threat-watch/i/malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install"},{"body":"OSV published MAL-2026-18335 at 20:42 UTC on 2026-10-26, from the GitHub malware advisory feed. The detail names 0.1.0 as the affected version.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install","incidentTitle":"Malicious npm package ctf-agent 0.1.0 — installed machines must be treated as compromised (no CVE)","kind":"advisory","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://api.osv.dev/v1/vulns/MAL-2026-18335","status":"live","title":"OSV MAL-2026-18335 published for ctf-agent 0.1.0","url":"https://helix.ml/threat-watch/i/malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install"},{"body":"Registry time history shows a 0.0.0-stage entry at 18:57 UTC and 0.1.0 at 19:18 UTC on 2026-10-26. The packument created timestamp is the 18:57 UTC stage time, which is later than the 2026-09 history.","category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install","incidentTitle":"Malicious npm package ctf-agent 0.1.0 — installed machines must be treated as compromised (no CVE)","kind":"other","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/ctf-agent","status":"live","title":"ctf-agent 0.0.0-stage created, then malicious 0.1.0 published","url":"https://helix.ml/threat-watch/i/malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install"},{"body":"Help Net Security reports the research by Gal Weizman and Omer Samet of Forever Security. Codex ran the malware in more than 90 percent of tests; Claude Code followed through about 50 percent of the time; about half of Forever's customers run a coding agent in Downloads and about a quarter of agent sessions open a browser. The researchers say there is nothing for OpenAI or Anthropic to patch.","category":"supply-chain","date":"2026-10-26","incident":"malfex-ai-coding-agents-codex-claude-code-planted-agents-md-in-downloads-tricks-agent-into-installing-malicious-npm-pack","incidentTitle":"Codex, Claude Code: planted AGENTS.md in Downloads makes agents install malicious npm package function-color","kind":"disclosure","patchStatus":"no-fix-needed","severity":"high","sourceUrl":"https://www.helpnetsecurity.com/2026/10/26/ai-coding-agents-malware-openai-codex/","status":"live","title":"Forever Security publishes research: planted AGENTS.md or CLAUDE.md in Downloads drives Codex and Claude Code toward function-color or token theft","url":"https://helix.ml/threat-watch/i/malfex-ai-coding-agents-codex-claude-code-planted-agents-md-in-downloads-tricks-agent-into-installing-malicious-npm-pack"},{"body":"LiteLLM's account (reported 2026-10-26) says the leaked key was never revoked and that the attacker used it to reach the internal LiteLLM Agent Platform and obtain access to the company's GitHub repositories. LiteLLM is revoking all tokens tied to its internal systems and vendor platforms.","category":"supply-chain","date":"2026-10-26","incident":"litellm-malicious-1-107-0-release-on-pypi-docker-steals-credentials-and-includes-dormant-c2","incidentTitle":"LiteLLM: malicious 1.107.0 release on PyPI/Docker steals credentials and includes dormant C2","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://www.theregister.com/security/2026/10/26/litellm-supply-chain-attack-started-with-an-exposed-master-key/5305544","status":"closed","title":"LiteLLM says the unrevoked key was the entry point and is now revoking every token tied to its internal systems and vendor platforms","url":"https://helix.ml/threat-watch/i/litellm-malicious-1-107-0-release-on-pypi-docker-steals-credentials-and-includes-dormant-c2"},{"body":"By 2026-10-26 02:16 UTC the registry metadata for dsh-native no longer lists 1.4.1; only the 0.0.0-stage entry remains and no security placeholder was published. The removal actor is not shown in the metadata.","category":"supply-chain","date":"2026-10-26","incident":"dsh-native-npm-malicious-package-version-1-4-1-fully-compromises-installed-machines-no-cve","incidentTitle":"dsh-native (npm) — malicious package version 1.4.1 fully compromises installed machines (no CVE)","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/dsh-native","status":"live","title":"dsh-native 1.4.1 removed from the npm registry","url":"https://helix.ml/threat-watch/i/dsh-native-npm-malicious-package-version-1-4-1-fully-compromises-installed-machines-no-cve"},{"body":"npm registry records 0.0.1-security placeholders for @capsense/ccx-welcome-page at 16:19 UTC and @capsense/core-ui at 16:21 UTC on 2026-10-26.","category":"supply-chain","date":"2026-10-26","incident":"capsense-npm-packages-capsense-core-ui-capsense-ccx-welcome-page-malicious-packages-fully-compromise-installed-machines","incidentTitle":"@capsense npm packages (@capsense/core-ui, @capsense/ccx-welcome-page) — malicious packages fully compromise installed machines","kind":"status","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://registry.npmjs.org/@capsense%2Fcore-ui","status":"live","title":"npm replaces both packages with a security placeholder","url":"https://helix.ml/threat-watch/i/capsense-npm-packages-capsense-core-ui-capsense-ccx-welcome-page-malicious-packages-fully-compromise-installed-machines"},{"body":null,"category":"supply-chain","date":"2026-10-26","incident":"electron-compromised-emudhra-intermediate-certificates-allow-tls-server-impersonation-cve-2026-115570","incidentTitle":"Electron: compromised eMudhra intermediate certificates allow TLS server impersonation (CVE-2026-115570)","kind":"patch","patchStatus":"patched","severity":"high","sourceUrl":"https://socket.dev/blog/emudhra-brotli-security-fix?utm_medium=feed","status":"live","title":"Fixes for eMudhra certificates and Brotli are out, but remediation is complicated by bundled libraries, runtimes, and certificate stores that need individual tracking","url":"https://helix.ml/threat-watch/i/electron-compromised-emudhra-intermediate-certificates-allow-tls-server-impersonation-cve-2026-115570"},{"body":null,"category":"supply-chain","date":"2026-10-26","incident":"malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install","incidentTitle":"Malicious npm package ctf-agent 0.1.0 — installed machines must be treated as compromised (no CVE)","kind":"disclosure","patchStatus":"no-fix-needed","severity":"critical","sourceUrl":"https://github.com/advisories/GHSA-2j3v-rjgw-5wgg","status":"live","title":"Malicious npm package ctf-agent 0.1.0 — full system compromise on install","url":"https://helix.ml/threat-watch/i/malicious-npm-package-ctf-agent-0-1-0-full-system-compromise-on-install"},{"body":null,"category":"supply-chain","date":"2026-10-26","incident":"storm-0940-artex-ai-driven-supply-chain-attack-connectwise-cloud-backup-china-aligned-actor-compromised-m365-tenants-via","incidentTitle":"ARTEX AI-driven attacks: ConnectWise Cloud Backup supply-chain compromise and suspected same-actor 123 Reg breach (no CVE)","kind":"victim","patchStatus":"no-fix-needed","severity":"high","sourceUrl":"https://www.bleepingcomputer.com/news/security/former-pentester-used-artex-ai-to-steal-82-million-data-records/","status":"live","title":"South Korean police identify seven suspects in ARTEX AI-driven attacks that breached 90+ organizations and stole 8.2 million records","url":"https://helix.ml/threat-watch/i/storm-0940-artex-ai-driven-supply-chain-attack-connectwise-cloud-backup-china-aligned-actor-compromised-m365-tenants-via"}],"feeds":{"changes":"https://helix.ml/threat-watch/c/supply-chain/changes.json","json":"https://helix.ml/threat-watch/c/supply-chain/feed.json","llms":"https://helix.ml/threat-watch/c/supply-chain/llms.txt","page":"https://helix.ml/threat-watch?c=supply-chain","rss":"https://helix.ml/threat-watch/c/supply-chain/feed.xml"},"generatedAt":"2026-10-30T06:06:40Z","site":"https://helix.ml/threat-watch"}