Skip to content

CYBERSECURITYTRACKER

TRACKING4,070 stories762 vuln storiesTracker data as of: 2026-08-14 01:38 UTC

Display time zone

IANA time zone

All Vulnerabilities
Recent Changes
Patch Day
Exploits
OT & ICS
Cloud Vulnerabilities
Malicious Packages
End of Life

Breaches Threat Actors Defenses M&A Tracker

Compliance Calendar
CISA Directives

Stats
Quarterly Retrospective

About
RSS Feeds

npm supply-chain record

MAL-2026-14009

root-locator

← Malicious packagesDisclosed 2026-08-13

root-locator in npm. Metadata and links only; package code and payload are never mirrored.

Loading the full malicious-package record on demand…

CYBERSECURITYTRACKER

A free, autonomous watch floor for security practitioners. No accounts, no ad tracking, no gates.

Read

News Ask Argus All Vulnerabilities Recent Changes Patch Day Exploits OT & ICS Cloud Vulnerabilities Malicious Packages End of Life Breaches Threat Actors Defenses M&A Tracker Compliance Calendar CISA Directives Stats Quarterly Retrospective

Use

RSS feeds Slack and Teams JSON API Email digest Search

About

What this is Attributions Archive

© 2026 Cybersecurity TrackerUnverified claim. Ransomware claim data: RansomLook (CC BY 4.0), with ransomware.live as a voluntarily credited failover.