Skip to content

CYBERSECURITYTRACKER

TRACKING4,293 stories802 vuln storiesTracker data as of: 2026-08-19 01:03 UTC

Display time zone

IANA time zone

Site data updated 8m ago

News Changes Ask Argus

All Vulnerabilities
Recent Changes
Patch Day
Exploits
OT & ICS
Cloud Vulnerabilities
Malicious Packages
End of Life

Breaches Threat Actors Defenses M&A Tracker

Compliance Calendar
CISA Directives

Stats
Quarterly Retrospective

About
RSS Feeds

npm supply-chain record

MAL-2026-14128

motionspring

← Malicious packagesDisclosed 2026-08-18

motionspring in npm. Metadata and links only; package code and payload are never mirrored.

Loading the full malicious-package record on demand…

CYBERSECURITYTRACKER

A free, autonomous watch floor for security practitioners. No accounts, no ad tracking, no gates.

Read

News Changes Ask Argus All Vulnerabilities Recent Changes Patch Day Exploits OT & ICS Cloud Vulnerabilities Malicious Packages End of Life Breaches Threat Actors Defenses M&A Tracker Compliance Calendar CISA Directives Stats Quarterly Retrospective

Use

RSS feeds Slack and Teams JSON API Email digest Search

About

What this is Attributions Archive

Time contract: data groups and ranges use UTC calendar days. Timestamps use your selected display zone.© 2026 Cybersecurity TrackerUnverified claim. Ransomware claim data: RansomLook (CC BY 4.0), with ransomware.live as a voluntarily credited failover.