Live stack monitoring for frameworks, packages, and vendor incidents
Feed synced 21h agoSecurity news for developers, not just security teams.
HackTribune turns supply-chain incidents, framework advisories, and malicious package reports into searchable incident pages, watchlists, and upgrade-worthy alerts.
10,557
incidents tracked
1,686
exploited in the wild
12
ecosystems covered
Verified against official advisory sources
Latest incidents
View all →UNKNOWNnpm
Malicious code in ckeditor5-ckbox (npm)
Malicious code in ckeditor5-ckbox (npm)
UNKNOWNnpm
Malicious code in vs-modules (npm)
Malicious code in vs-modules (npm)
UNKNOWNnpm
Malicious code in techportal (npm)
Malicious code in techportal (npm)
UNKNOWNnpm
Malicious code in eth-pino (npm)
Malicious code in eth-pino (npm)
UNKNOWNnpm
Malicious code in @testrelic/playwright-analytics (npm)
Malicious code in @testrelic/playwright-analytics (npm)
UNKNOWNnpm
Malicious code in js-tokens-array (npm)
Malicious code in js-tokens-array (npm)