Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 20h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
9,431
incidents tracked
1,686
exploited in the wild
12
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNunknown
Please stop flooding our projects with AI slop to furnish your CV
UNKNOWNnpm
Malicious code in @znan/wabot (npm)
Malicious code in @znan/wabot (npm)
UNKNOWNnpm
Malicious code in @fleetbo/svro (npm)
Malicious code in @fleetbo/svro (npm)
MEDIUMunknown
rubygem-katello: Cross-tenant Content View Filter rule access and modification via unauthorized parent filter lookup
rubygem-katello: Cross-tenant Content View Filter rule access and modification via unauthorized parent filter lookup
MEDIUMunknown
foreman: Cross-tenant disclosure of template revisions via unauthorized audit lookup
foreman: Cross-tenant disclosure of template revisions via unauthorized audit lookup
MEDIUMunknown
gdk-pixbuf: gdk-pixbuf: invalid write in JPEG ICC profile parser on error recovery
gdk-pixbuf: gdk-pixbuf: invalid write in JPEG ICC profile parser on error recovery