Product
@tiledesk/tiledesk-server
- First Reported
- May 22, 2026
- Latest Reported
- May 22, 2026
Reported Context (1)
- Tiledesk (9 repos) - open source live chat and chatbot platform. npm package @tiledesk/tiledesk-server poisoned across versions 2.18.6–2.18.12; backdoor propagated to downstream consumers via npm registry. Step Security Details Megalodon’s GitHub Actions Secret-Exfiltration Campaign
MITRE ATT&CK (11)
Vendors (1)
Products (2)
Tools (1)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.