Sheet 0.02Series 0 · GeneralWardlatch · Free · Open source
Free leak check · 10 live incidents
One free check. One sheet per incident.
Wardlatch is the free, open-source leak check from Deimos AI LLC. It checks your machine against 10 live incidents, the compromised eMudhra keys first, and sends nothing. Each incident has its own sheet: what is checked, the command, the answers it can give, and the fix.

AThe register
The register.
Every incident sheet, with the Mac fix as an added sheet (4.01A): each one’s kicker, title and incident line as its own page prints them.
Free leak check · 10 live incidentsDoes the wrong key still turn?Incident · eMudhra · 2026-10-20/wardlatch/4.01Updated your Mac? Read thisThe eMudhra Mac fix: curl, git, python3 and pip.Incident · eMudhra · 2026-10-20/wardlatch/mac/4.01ACVE-2026-111497The Brotli decoder flaw: are you affected?Incident · Brotli · 2026-10-21/wardlatch/brotli/4.02CVE-2026-109618 · CVE-2026-109619php2shell: is your PHP affected?Incident · PHP · 2026-10-21/wardlatch/php/4.03CVE-2026-110264Is your GitLab affected?Incident · GitLab · 2026-10-21/wardlatch/gitlab/4.04litellm 1.107.0Did the LiteLLM stealer reach you?Incident · LiteLLM · 2026-10-21/wardlatch/litellm/4.05CVE-2026-96652 · 96654 · 96655 · 96656Plex2Shell: is your Plex server affected?Incident · Plex · 2026-10-20/wardlatch/plex/4.06GHSA-862f-55f5-vmvwDid you get the swapped OVHcloud CLI?Incident · OVHcloud CLI · 2026-10-19/wardlatch/ovhcloud-cli/4.07Rank Math PRO · UpdraftCentralTwo WordPress plugin attacks: is your site affected?Incident · WordPress · 15 to 2026-10-19/wardlatch/wordpress-plugins/4.08GitHub ActionsWas a secret-stealing workflow planted in your repository?Incident · GitHub Actions · since 2026-10-07/wardlatch/github-actions/4.09Keys in codeAre there keys committed to your code?Incident · Committed keys · 2026-10-20/wardlatch/committed-keys/4.10
Release 0.1.13 on npm. Each sheet names the incident file the check reads, and the vendor’s own advisory.