Cremit
/incidentsfield log
CatchesCampaignsExfilPatternsLLMIncidentsMethodology
↺rss↗cremit.io

incidents.cremit.io

A reference feed of real-world Non-Human Identity (NHI) credential leak incidents. Maintained by Cremit.

Browse

  • All incidents
  • npm supply chain
  • CI/CD compromise
  • Methodology

Subscribe

  • RSS feed
  • @cremit_io
  • GitHub
// status
monitor active
// build
2026-05-20
// origin
cremit · seoul, kr
// license
CC BY 4.0

© 2026 Cremit. content reuse encouraged with attribution.

campaigns/shared NHI target

SSH private keys

ssh-private-keysrefire #36
members
6
combined blast
295/wk
last alerted
57m ago
2026-05-20
fire count
36
first alerted 18h ago

// members

Every caught package that currently matches this cluster's axis, replayed live over the last 7 days. Snippets show where the cluster identifier appears in the package's static excerpt or which takeover heuristic fired.

  • npm/jest-url-loader·@0.1.0·17h ago·atool
    var bitmap = fs.readFileSync(filename);

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

  • npm/·@2.1.7·87/wk·17h ago·
    import F2 from '@antv/f2'; import { my as my$1 } from '@antv/f2-context';

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

  • npm/·@1.4.2·17h ago·
    let imports = {}; imports['__wbindgen_placeholder__'] = module.exports; let wasm; const { TextDecoder, TextEncoder } = require(`util`);

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

  • npm/·@1.10.0·18h ago·
    const { requestAnimationFrame, cancelAnimationFrame } = node;

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

  • npm/·@2.0.6·18h ago·
    import { map, memoize, isString, each } from '@antv/util';

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

  • npm/·@3.3.2·208/wk·18h ago·
    import type { ReactNode } from 'react'; import type { EntityType, PhraseSpec, HeadlineSpec, ParagraphSpec, BulletItemSpec, SectionSpec, NarrativeTextSpec } from '@antv/ava'; import type { PluginManager } from '../chore/plugin'; export type 

    llm: No suspicious destination, no remote-exec shape — 1 known-vendor host(s).

@antv/my-f2
zengyue
@antv/layout-wasm
iaaron
@antv/f-wx
xuying1027
@antv/color-util
atool
@antv/ava-react
bbsqq
← back to all campaigns