Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 14h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
21,188
incidents tracked
1,733
exploited in the wild
15
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNunknown
Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models
UNKNOWNunknown
Preventing quantum downgrade attacks against IPsec
UNKNOWNnpm
Malicious code in kartykgithub-ph-e (npm)
Malicious code in kartykgithub-ph-e (npm)
UNKNOWNnpm
Malicious code in kartykgithub-ph-b (npm)
Malicious code in kartykgithub-ph-b (npm)
UNKNOWNnpm
Malicious code in kartykgithub-ph-f (npm)
Malicious code in kartykgithub-ph-f (npm)
HIGHunknown
tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient
tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient