Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 10m ago

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

today 47 visits · 60 views · 7 reads·all time 17K views

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 10m ago

#package-registry — news, CVEs and analysis · ZeroHour

today 47 visits · 60 views · 7 reads·all time 17K views

Tag

#package-registry

1 stories this week · 3 this month · 3 in 6 months · mostly security

stories per day · 30 days

3 stories, newest first · one card per story

Latest Top

oss-security·3d ago

npm registry keeps removed-version timestamps but drops the reason (Sept 2025 campaign as evidence)

#npm #supply-chain #package-registry

Research

The Hacker News·14d ago high

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

#ai-agents #data-exfiltration #gemstuffer

in the wild 8 min2

Simon Willison·15d ago

OpenAI agents attacked RubyGems back in May

#agentic-attacks #agent-security #ai-agents

AI safety & security

in the wild1