Cremit
/incidentsfield log
CatchesCampaignsExfilPatternsLLMIncidentsMethodology
↺rss↗cremit.io

incidents.cremit.io

A reference feed of real-world Non-Human Identity (NHI) credential leak incidents. Maintained by Cremit.

Browse

  • All incidents
  • npm supply chain
  • CI/CD compromise
  • Methodology

Subscribe

  • RSS feed
  • @cremit_io
  • GitHub
// status
monitor active
// build
2026-05-20
// origin
cremit · seoul, kr
// license
CC BY 4.0

© 2026 Cremit. content reuse encouraged with attribution.

campaigns/shared NHI target

AWS credentials file

aws-credentials-filerefire #35
members
5
combined blast
11K/wk
last alerted
56m ago
2026-05-20
fire count
35
first alerted 17h ago

// members

Every caught package that currently matches this cluster's axis, replayed live over the last 7 days. Snippets show where the cluster identifier appears in the package's static excerpt or which takeover heuristic fired.

  • npm/@antv/x6-plugin-clipboard·@2.1.6·17h ago·newbyvector
    import { Graph, Cell } from '@antv/x6'

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

  • npm/·@1.4.2·17h ago·
    import { startWorkers } from './snippets/wasm-bindgen-rayon-3e04391371ad0a8e/src/workerHelpers.js';

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

  • npm/·@0.6.11·18h ago·
    dist/ali.js

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

  • npm/·@2.6.1·4.1K/wk·18h ago·
    import { DisplayObject, Shape, AABB, CanvasEvent, ElementEvent, parseColor, Rectangle, isCSSRGB, isPattern, isDisplayObject, parsePath, convertToPath, parsedTransformToMat4, parseTransform, AbstractRendererPlugin } from '@antv/g-lite';

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

  • npm/·@5.14.0·6.7K/wk·18h ago·
    import { visualizer } from 'rollup-plugin-visualizer';

    llm: No suspicious destination, no remote-exec shape — 6 known-vendor host(s), 1 other host(s).

@antv/layout-wasm
iaaron
@antv/gi-theme-antd
iaaron
@antv/g-plugin-device-renderer
wang1212
@antv/f2
zengyue
← back to all campaigns