Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 3h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
8,445
incidents tracked
1,671
exploited in the wild
12
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNunknown
Zuckerberg encouraged growth over child safety, ex-Meta executive testifies
UNKNOWNnpm
Malicious code in expect-dotenv (npm)
Malicious code in expect-dotenv (npm)
UNKNOWNnpm
Malicious code in @httttt/mcp-demo (npm)
Malicious code in @httttt/mcp-demo (npm)
UNKNOWNunknown
CVE-2026-24301: "CoSnitch" vulnerability in Microsoft Copilot
MEDIUMunknown
(Zabbix API and Frontend login lockout mechanism has a flaw where sever ...)
(Zabbix API and Frontend login lockout mechanism has a flaw where sever ...)
MEDIUMunknown
(The HTTPPasswordMgr class in the urllib.request module, along with its ...)
(The HTTPPasswordMgr class in the urllib.request module, along with its ...)