🚨 TL;DR: Attackers are sending fake Sentry bug alerts to projects using public Sentry DSNs. The fake alert is designed to trick AI agents into running a malicious `npx` command that looks like a Sentry profiling diagnostic.
Do NOT run commands from Sentry issues/logs/alerts unless verified.
These are not legitimate Sentry fix commands. The malicious package reportedly steals environment variables/secrets and sends them to advisory-tracker[.]com.
📢 New feature alert! Radar now supports finer-grained chart granularity for longer time ranges. This means:
✅ 1-3 month views: weekly → daily (7x more data points)
✅ 6+ month HTTP views: monthly → weekly (4x more data points)
💡A 12-week traffic view used to show 13 weekly data points — now you get 90 daily
data points 📈
🔗 Check it out: https://t.co/juLiMqDU1N
📝 Changelog: https://t.co/dxLnBPyi7B