https://pwn.watch/s/node Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 12:59:41 GMT https://pwn.watch/i/nodejs-october-2026-security-releases nodejs-october-2026-security-releases:2026-10-21:Node.js published the Wednesday security releases and advisory. Wed, 21 Oct 2026 00:00:00 GMT high Status: live, patched https://pwn.watch/i/nodejs-october-2026-security-releases nodejs-october-2026-security-releases:2026-10-21:Vercel deployed WAF rules for the Brotli attack vector and began rolling patched runtimes. Wed, 21 Oct 2026 00:00:00 GMT high Status: live, patched https://pwn.watch/i/subql-common-npm-backdoor subql-common-npm-backdoor:2026-10-10:SubQuery maintainer: compromised token deleted, security review started. Sat, 10 Oct 2026 00:00:00 GMT critical Source: https://github.com/subquery/subql/issues/3047 Status: closed, patched https://pwn.watch/i/tensorlake-npm-shai-hulud-worm tensorlake-npm-shai-hulud-worm:2026-10-08:0.5.144 published via the project’s release workflow. Thu, 08 Oct 2026 00:00:00 GMT critical Status: live, partial https://pwn.watch/i/tensorlake-npm-shai-hulud-worm tensorlake-npm-shai-hulud-worm:2026-10-08+:StepSecurity / Socket detections and public write-ups; remediation guidance emphasizes removing gh-token-monitor before revoke. Thu, 08 Oct 2026 00:00:00 GMT critical Status: live, partial https://pwn.watch/i/tensorlake-npm-shai-hulud-worm tensorlake-npm-shai-hulud-worm:2026-10-07:Malicious commits land on tensorlakeai/tensorlake main. Wed, 07 Oct 2026 00:00:00 GMT critical Status: live, partial https://pwn.watch/i/subql-common-npm-backdoor subql-common-npm-backdoor:2026-10-06:GMO Flatt Security publishes payload analysis and response guidance. Tue, 06 Oct 2026 00:00:00 GMT critical Source: https://flatt.tech/research/posts/subql-common-npm-supply-chain-attack/ Status: closed, patched https://pwn.watch/i/subql-common-npm-backdoor subql-common-npm-backdoor:2026-10-05T11:56Z:Malicious @subql/common 5.8.3 published via the repo's GitHub Actions trusted publisher (canary 5.8.3-onf-rt1 published ~32 min earlier). Mon, 05 Oct 2026 00:00:00 GMT critical Source: https://www.stepsecurity.io/blog/subql-ecosystem-compromised Status: closed, patched https://pwn.watch/i/subql-common-npm-backdoor subql-common-npm-backdoor:2026-10-05T12:14Z:StepSecurity opens security issue #3047 in subquery/subql. Mon, 05 Oct 2026 00:00:00 GMT critical Source: https://github.com/subquery/subql/issues/3047 Status: closed, patched https://pwn.watch/i/subql-common-npm-backdoor subql-common-npm-backdoor:2026-10-05T12:46Z:GitHub publishes malware advisory GHSA-9333-3c4x-x3h5; version removed from npm (~50 minutes live); 'latest' back to 5.8.2. Mon, 05 Oct 2026 00:00:00 GMT critical Source: https://github.com/advisories/GHSA-9333-3c4x-x3h5 Status: closed, patched https://pwn.watch/i/shai-hulud-chaindrop-npm-keyv-august shai-hulud-chaindrop-npm-keyv-august:2026-08-04:keyv/cacheable malicious releases observed; worm begins propagating. Tue, 04 Aug 2026 00:00:00 GMT critical Status: closed, partial https://pwn.watch/i/shai-hulud-chaindrop-npm-keyv-august shai-hulud-chaindrop-npm-keyv-august:2026-08-04/06:Microsoft, Elastic, JFrog publish analyses; 400+ packages listed. Tue, 04 Aug 2026 00:00:00 GMT critical Status: closed, partial https://pwn.watch/i/nx-nx-console-cve-2026-48027 nx-nx-console-cve-2026-48027:2026-05-27:CISA added CVE-2026-48027 to the KEV catalog (due 2026-06-10). Wed, 27 May 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/tanstack-tanstack-cve-2026-45321 tanstack-tanstack-cve-2026-45321:2026-05-27:CISA added CVE-2026-45321 to the KEV catalog (due 2026-06-10). Wed, 27 May 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/react-native-community-cli-cve-2025-11953 react-native-community-cli-cve-2025-11953:2026-02-05:CISA added CVE-2025-11953 to the KEV catalog (due 2026-02-26). Thu, 05 Feb 2026 00:00:00 GMT high Status: closed, patched