Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 13h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
8,619
incidents tracked
1,674
exploited in the wild
12
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNnpm
Malicious code in chai-as-soul (npm)
Malicious code in chai-as-soul (npm)
UNKNOWNnpm
Malicious code in moidevy (npm)
Malicious code in moidevy (npm)
UNKNOWNnpm
Malicious code in mcq-session (npm)
Malicious code in mcq-session (npm)
UNKNOWNnpm
Malicious code in @next-fonts/font (npm)
Malicious code in @next-fonts/font (npm)
UNKNOWNnpm
Malicious code in @js-lib-team/env-parser (npm)
Malicious code in @js-lib-team/env-parser (npm)
UNKNOWNnpm
Malicious code in coin-fees (npm)
Malicious code in coin-fees (npm)