Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 4m agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
7,474
incidents tracked
1,665
exploited in the wild
11
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNunknown
The quirky personal homepages of programming language creators
UNKNOWNnpm
Malicious code in gunzip-js (npm)
Malicious code in gunzip-js (npm)
UNKNOWNnpm
Malicious code in harmony-app-toolkit (npm)
Malicious code in harmony-app-toolkit (npm)
UNKNOWNnpm
Malicious code in require-i18next (npm)
Malicious code in require-i18next (npm)
UNKNOWNnpm
Malicious code in depcruise-wrap-stream-in-html (npm)
Malicious code in depcruise-wrap-stream-in-html (npm)
UNKNOWNnpm
Malicious code in akamaijs-sensorv1 (npm)
Malicious code in akamaijs-sensorv1 (npm)