Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 2h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
7,571
incidents tracked
1,665
exploited in the wild
11
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNnpm
Malicious code in @ai-vertical/ai-agent (npm)
Malicious code in @ai-vertical/ai-agent (npm)
UNKNOWNunknown
Nvidia dramatically reduces amount of OpenAI infra financing it may guarantee
UNKNOWNunknown
Stop Turning every purchase into a tip request
UNKNOWNunknown
Young People Hate AI CEOs So Passionately That It's Almost Hard to Believe
UNKNOWNunknown
Qwen 3.8 27B is excellent, but it defaults to overthinking things
UNKNOWNPyPI
Malicious code in kb-ai (PyPI)
Malicious code in kb-ai (PyPI)