Skip to content

CYBERSECURITYTRACKER

TRACKING4,193 stories786 vuln storiesTracker data as of: 2026-08-18 07:02 UTC

Display time zone

IANA time zone

Site data updated 8m ago

News Changes Ask Argus

All Vulnerabilities
Recent Changes
Patch Day
Exploits
OT & ICS
Cloud Vulnerabilities
Malicious Packages
End of Life

Breaches Threat Actors Defenses M&A Tracker

Compliance Calendar
CISA Directives

Stats
Quarterly Retrospective

About
RSS Feeds

npm supply-chain record

MAL-2026-14111

sugarball-cli

← Malicious packagesDisclosed 2026-08-17

sugarball-cli in npm. Metadata and links only; package code and payload are never mirrored.

Loading the full malicious-package record on demand…

CYBERSECURITYTRACKER

A free, autonomous watch floor for security practitioners. No accounts, no ad tracking, no gates.

Read

News Changes Ask Argus All Vulnerabilities Recent Changes Patch Day Exploits OT & ICS Cloud Vulnerabilities Malicious Packages End of Life Breaches Threat Actors Defenses M&A Tracker Compliance Calendar CISA Directives Stats Quarterly Retrospective

Use

RSS feeds Slack and Teams JSON API Email digest Search

About

What this is Attributions Archive

Time contract: data groups and ranges use UTC calendar days. Timestamps use your selected display zone.© 2026 Cybersecurity TrackerUnverified claim. Ransomware claim data: RansomLook (CC BY 4.0), with ransomware.live as a voluntarily credited failover.