docs / detection-ledger
Detection Ledger
A public commit record of supply chain compromise incidents registered by Attestd. Each incident lists packages, versions, how Attestd registered the signal, and OSV or advisory citations when available.
Entries are pushed to a public GitHub repository. Commit timestamps show when the ledger entry was published. This is an archive of what Attestd registered, not a claim that Attestd beat OSV or press.
detection record
3209 incidents across npm and pypi. 3118 with an OSV citation (53 demo or sandbox entries hidden). 3048 verifiable within 24 hours of registration; 161 historical.
Show all entries including demos
Full commit history and JSON artifacts: github.com/attestd-io/detection-ledger
verifiable incidents
Incidents committed to the ledger within 24 hours of registration. GitHub commit time matches detection time for these entries.
Showing 100 of 3048. Show all in this section · Full ledger.json
| Incident | Source | Registered | OSV | Citation |
|---|---|---|---|---|
wsh4-edu-2026-07-27 wsh4_edu wsh4_edu | osv | 2026-07-27 01:51 UTC | MAL-2026-11072 | link |
whs4-eud-2026-07-27 whs4_eud whs4_eud | osv | 2026-07-27 01:51 UTC | MAL-2026-11071 | link |
whs4-deu-2026-07-27 whs4_deu whs4_deu | osv | 2026-07-27 01:51 UTC | MAL-2026-11070 | link |
clerk-next-fix-auth-protection-2026-07-27 clerk-next-fix-auth-protection clerk-next-fix-auth-protection | osv | 2026-07-27 01:51 UTC | MAL-2026-11069 | link |
semantic-router-2026-07-26 semantic-router semantic-router | pypi_yank | 2026-07-26 23:16 UTC | — | link |
random-ua-generator-2026-07-26 random-ua-generator random-ua-generator | osv | 2026-07-26 20:31 UTC | MAL-2026-11068 | link |
blessclient-2026-07-25 blessclient blessclient | osv | 2026-07-25 22:06 UTC | MAL-2026-11067 | link |
signalk-beluga-core-2026-07-25 signalk-beluga-core · ks-radar signalk-beluga-core | npm_registry | 2026-07-25 22:06 UTC | — | link |
ks-radar-radar-2026-07-25 @ks-radar/radar @ks-radar/radar | osv | 2026-07-25 22:04 UTC | MAL-2026-11066 | link |
swiper-angular-2026-07-25 swiper_angular swiper_angular | osv | 2026-07-25 16:59 UTC | MAL-2026-11065 | link |
page-navigation-2026-07-25 page-navigation page-navigation | osv | 2026-07-25 12:08 UTC | MAL-2026-11064 | link |
xo-member-components-2026-07-25 xo-member-components xo-member-components | osv | 2026-07-25 10:41 UTC | MAL-2026-11063 | link |
preferenceslifecycle-paypal-2026-07-25 preferenceslifecycle-paypal preferenceslifecycle-paypal | osv | 2026-07-25 10:41 UTC | MAL-2026-11062 | link |
identityscimapiserv-2026-07-25 identityscimapiserv identityscimapiserv | osv | 2026-07-25 10:41 UTC | MAL-2026-11061 | link |
f0-form-manipulator-2026-07-25 f0-form-manipulator f0-form-manipulator | osv | 2026-07-25 10:41 UTC | MAL-2026-11060 | link |
pp-react-ui5-2026-07-25 pp-react-ui5 pp-react-ui5 | osv | 2026-07-25 09:56 UTC | MAL-2026-11059 | link |
payoutsvettingserv-paypal-2026-07-25 payoutsvettingserv-paypal payoutsvettingserv-paypal | osv | 2026-07-25 09:56 UTC | MAL-2026-11058 | link |
merchantprefsservice-paypal-2026-07-25 merchantprefsservice-paypal merchantprefsservice-paypal | osv | 2026-07-25 09:55 UTC | MAL-2026-11057 | link |
gpaas-paypal-2026-07-25 gpaas-paypal gpaas-paypal | osv | 2026-07-25 09:55 UTC | MAL-2026-11056 | link |
fundraiserserv-2026-07-25 fundraiserserv fundraiserserv | osv | 2026-07-25 09:55 UTC | MAL-2026-5172 | link |
f0-fpti-tracking-manager-2026-07-25 f0-fpti-tracking-manager f0-fpti-tracking-manager | osv | 2026-07-25 09:55 UTC | MAL-2023-8293 | link |
f0-data-constructor-2026-07-25 f0-data-constructor f0-data-constructor | osv | 2026-07-25 09:55 UTC | MAL-2023-1491 | link |
fundraiserservicepp-2026-07-25 fundraiserservicepp fundraiserservicepp | osv | 2026-07-25 08:58 UTC | MAL-2026-11055 | link |
trongridy-2026-07-24 trongridy trongridy | osv | 2026-07-24 22:42 UTC | MAL-2026-11051 | link |
discordnv-2026-07-24 discordnv discordnv | osv | 2026-07-24 20:13 UTC | MAL-2026-11050 | link |
mrmustard-2026-07-24 mrmustard mrmustard | osv | 2026-07-24 15:25 UTC | MAL-2026-11049 | link |
roles-royce-2026-07-24 roles-royce roles-royce | osv | 2026-07-24 10:31 UTC | MAL-2026-10927 | link |
karpatkit-2026-07-24 karpatkit karpatkit | osv | 2026-07-24 10:31 UTC | MAL-2026-11048 | link |
karpatkey-2026-07-24 karpatkey karpatkey | osv | 2026-07-24 10:31 UTC | MAL-2026-11047 | link |
intel-cicd-repo-infrastructure-2026-07-24 intel-cicd-repo-infrastructure intel-cicd-repo-infrastructure | osv | 2026-07-24 10:31 UTC | MAL-2026-11046 | link |
subapp-pkg-util-2026-07-24 subapp-pkg-util subapp-pkg-util | osv | 2026-07-24 08:32 UTC | MAL-2026-11045 | link |
supplyhub-2026-07-24 supplyhub supplyhub | osv | 2026-07-24 07:16 UTC | MAL-2026-11043 | link |
tailwind-gutenberg-block-zero-2026-07-24 tailwind-gutenberg-block-zero tailwind-gutenberg-block-zero | osv | 2026-07-24 07:16 UTC | MAL-2026-11044 | link |
faust-cont-2026-07-24 faust-cont faust-cont | osv | 2026-07-24 06:49 UTC | MAL-2026-11042 | link |
daylightqc-date-fmt-lite-2026-07-24 @daylightqc/date-fmt-lite @daylightqc/date-fmt-lite | osv | 2026-07-24 04:42 UTC | MAL-2026-11041 | link |
react-tabulix-extended-2026-07-24 react-tabulix-extended react-tabulix-extended | osv | 2026-07-24 00:52 UTC | MAL-2026-11040 | link |
govapkg-2026-07-23 govapkg govapkg | osv | 2026-07-23 21:06 UTC | MAL-2026-11031 | link |
params-valid-js-2026-07-23 params-valid-js params-valid-js | osv | 2026-07-23 08:38 UTC | MAL-2026-5988 | link |
sea-bound-siren-2026-07-23 sea-bound-siren sea-bound-siren | osv | 2026-07-23 08:37 UTC | MAL-2026-5693 | link |
solana-web3-community-2026-07-23 solana-web3-community solana-web3-community | osv | 2026-07-23 08:37 UTC | MAL-2026-5560 | link |
js-shared-modules-2026-07-23 js-shared-modules js-shared-modules | osv | 2026-07-23 08:36 UTC | MAL-2026-5098 | link |
mvn-runtime-2026-07-23 mvn-runtime mvn-runtime | osv | 2026-07-23 08:36 UTC | MAL-2026-1202 | link |
ng-vzbootstrap-2026-07-23 ng-vzbootstrap ng-vzbootstrap | osv | 2026-07-23 08:36 UTC | MAL-2026-1100 | link |
your-unique-package-name1337-2026-07-23 your-unique-package-name1337 your-unique-package-name1337 | osv | 2026-07-23 08:35 UTC | MAL-2026-10906 | link |
win-build-utils-2026-07-23 win-build-utils win-build-utils | osv | 2026-07-23 08:35 UTC | MAL-2026-10905 | link |
solana-web3-v1-2026-07-23 solana-web3-v1 solana-web3-v1 | osv | 2026-07-23 08:35 UTC | MAL-2026-10904 | link |
solana-web3-stable-2026-07-23 solana-web3-stable solana-web3-stable | osv | 2026-07-23 08:35 UTC | MAL-2026-10903 | link |
solana-web3-patched-2026-07-23 solana-web3-patched solana-web3-patched | osv | 2026-07-23 08:35 UTC | MAL-2026-10902 | link |
solana-web3-lts-2026-07-23 solana-web3-lts solana-web3-lts | osv | 2026-07-23 08:35 UTC | MAL-2026-10901 | link |
solana-web3-fork-2026-07-23 solana-web3-fork solana-web3-fork | osv | 2026-07-23 08:35 UTC | MAL-2026-10900 | link |
solana-web3-fixed-2026-07-23 solana-web3-fixed solana-web3-fixed | osv | 2026-07-23 08:35 UTC | MAL-2026-10899 | link |
solana-rpc-client-2026-07-23 solana-rpc-client solana-rpc-client | osv | 2026-07-23 08:35 UTC | MAL-2026-10898 | link |
kirkland-2026-07-23 kirkland kirkland | osv | 2026-07-23 08:34 UTC | MAL-2026-10331 | link |
ng-search-api-2026-07-23 ng-search-api ng-search-api | osv | 2026-07-23 08:34 UTC | MAL-2026-10146 | link |
motiondnb-2026-07-23 motiondnb motiondnb | osv | 2026-07-23 08:34 UTC | MAL-2026-10145 | link |
workspace-scripts-2026-07-23 workspace-scripts workspace-scripts | osv | 2026-07-23 08:34 UTC | MAL-2026-10113 | link |
workspace-lint-2026-07-23 workspace-lint workspace-lint | osv | 2026-07-23 08:34 UTC | MAL-2026-10112 | link |
shark-e2e-bnsneo-2026-07-23 shark-e2e-bnsneo shark-e2e-bnsneo | osv | 2026-07-23 08:28 UTC | MAL-2026-10912 | link |
mysuperlicense-2026-07-23 mysuperlicense mysuperlicense | osv | 2026-07-23 08:28 UTC | MAL-2026-10911 | link |
mysupergoodpython-2026-07-23 mysupergoodpython mysupergoodpython | osv | 2026-07-23 08:28 UTC | MAL-2026-10910 | link |
ibreak-2026-07-23 ibreak ibreak | osv | 2026-07-23 08:28 UTC | MAL-2026-10909 | link |
jupyterlab-2026-07-23 jupyterlab jupyterlab | osv | 2026-07-23 02:29 UTC | GHSA-gx64-gj6p-pc4c | link |
hardhat-gas-tracker-2026-07-22 hardhat-gas-tracker hardhat-gas-tracker | osv | 2026-07-22 23:32 UTC | MAL-2026-11020 | link |
web3-terminal-2026-07-22 web3-terminal web3-terminal | osv | 2026-07-22 21:09 UTC | MAL-2026-11007 | link |
n8n-nodes-utils-helper-2026-07-22 n8n-nodes-utils-helper n8n-nodes-utils-helper | osv | 2026-07-22 21:09 UTC | MAL-2026-11006 | link |
n8n-nodes-quick-utils-2026-07-22 n8n-nodes-quick-utils n8n-nodes-quick-utils | osv | 2026-07-22 21:09 UTC | MAL-2026-11005 | link |
n8n-nodes-pwn-2026-07-22 n8n-nodes-pwn n8n-nodes-pwn | osv | 2026-07-22 21:09 UTC | MAL-2026-11004 | link |
n8n-nodes-net-utils-2026-07-22 n8n-nodes-net-utils n8n-nodes-net-utils | osv | 2026-07-22 21:08 UTC | MAL-2026-11003 | link |
habinger-2026-07-22 habinger habinger | osv | 2026-07-22 21:08 UTC | MAL-2026-11002 | link |
application-util-2026-07-22 application-util application-util | osv | 2026-07-22 21:08 UTC | MAL-2026-11000 | link |
n8n-nodes-task-runner-2026-07-22 n8n-nodes-task-runner n8n-nodes-task-runner | osv | 2026-07-22 20:38 UTC | MAL-2026-10999 | link |
n8n-nodes-port-scanner-2026-07-22 n8n-nodes-port-scanner n8n-nodes-port-scanner | osv | 2026-07-22 20:38 UTC | MAL-2026-10998 | link |
n8n-nodes-http-probe-2026-07-22 n8n-nodes-http-probe n8n-nodes-http-probe | osv | 2026-07-22 20:38 UTC | MAL-2026-10997 | link |
init-js-examples-2026-07-22 init-js-examples init-js-examples | osv | 2026-07-22 20:38 UTC | MAL-2026-10996 | link |
habingeer-2026-07-22 habingeer habingeer | osv | 2026-07-22 20:38 UTC | MAL-2026-10995 | link |
app-data-ist-2026-07-22 app-data-ist app-data-ist | osv | 2026-07-22 20:37 UTC | MAL-2026-10994 | link |
torch-musa-2026-07-22 torch-musa torch-musa | osv | 2026-07-22 18:45 UTC | MAL-2026-10993 | link |
dev-helper-bg-2026-07-22 dev-helper-bg dev-helper-bg | osv | 2026-07-22 11:33 UTC | MAL-2026-10992 | link |
make-helper-2026-07-22 make-helper make-helper | osv | 2026-07-22 10:27 UTC | MAL-2026-10991 | link |
comp-colors-2026-07-22 comp-colors comp-colors | osv | 2026-07-22 04:41 UTC | MAL-2026-10986 | link |
animated-octo-spoon-2026-07-22 animated-octo-spoon animated-octo-spoon | osv | 2026-07-22 04:41 UTC | MAL-2026-10985 | link |
apexfdn-apex-2026-07-22 @apexfdn/apex @apexfdn/apex | osv | 2026-07-22 04:41 UTC | MAL-2026-10979 | link |
react-tabulix-virtual-2026-07-22 react-tabulix-virtual react-tabulix-virtual | osv | 2026-07-22 04:41 UTC | MAL-2026-10989 | link |
react-tabulix-ui-2026-07-22 react-tabulix-ui react-tabulix-ui | osv | 2026-07-22 04:41 UTC | MAL-2026-10988 | link |
react-tabulix-core-2026-07-22 react-tabulix-core react-tabulix-core | osv | 2026-07-22 04:41 UTC | MAL-2026-10987 | link |
paperclip-ai-2026-07-20 paperclip-ai paperclip-ai | osv | 2026-07-20 10:35 UTC | MAL-2026-10869 | link |
neroteam-v1-2026-07-20 neroteam-v1 neroteam-v1 | osv | 2026-07-20 09:18 UTC | MAL-2026-10868 | link |
vantrala-2026-07-20 vantrala vantrala | osv | 2026-07-20 06:15 UTC | MAL-2026-10867 | link |
nemopush-2026-07-20 nemopush nemopush | osv | 2026-07-20 06:14 UTC | MAL-2026-10866 | link |
kimitalk-2026-07-20 kimitalk kimitalk | osv | 2026-07-20 06:14 UTC | MAL-2026-10865 | link |
kimichat-2026-07-20 kimichat kimichat | osv | 2026-07-20 06:14 UTC | MAL-2026-10864 | link |
telebot-bot-run-2026-07-20 telebot-bot-run telebot-bot-run | osv | 2026-07-20 04:57 UTC | MAL-2026-10863 | link |
ngx-context-menu-2026-07-20 ngx-context-menu ngx-context-menu | osv | 2026-07-20 03:10 UTC | GHSA-xwg3-gjxh-c8pm | link |
openai-codex-2026-07-20 @openai/codex @openai/codex | osv | 2026-07-20 03:10 UTC | GHSA-xrxf-jgv3-qmrm | link |
bictoin-ops-2026-07-20 bictoin-ops bictoin-ops | osv | 2026-07-20 03:10 UTC | GHSA-xrrg-wfwc-c7r3 | link |
degbu-2026-07-20 degbu degbu | osv | 2026-07-20 03:10 UTC | GHSA-xr3g-4gg5-w3wq | link |
cionstring-2026-07-20 cionstring cionstring | osv | 2026-07-20 03:10 UTC | GHSA-xh8g-j88w-6v59 | link |
nodesass-2026-07-20 nodesass nodesass | osv | 2026-07-20 03:10 UTC | GHSA-xfmw-2vmm-579c | link |
commanedr-2026-07-20 commanedr commanedr | osv | 2026-07-20 03:10 UTC | GHSA-xcgx-27q5-7634 | link |
cordova-plugin-china-picker-2026-07-20 cordova-plugin-china-picker cordova-plugin-china-picker | osv | 2026-07-20 03:10 UTC | GHSA-x9gm-qxhh-rf75 | link |
historical incidents
Incidents registered before the ledger repository existed, or without a matching near-real-time commit. The registered timestamp reflects internal database records where available.
Showing 100 of 161. Show all in this section · Full ledger.json
| Incident | Source | Registered | OSV | Citation |
|---|---|---|---|---|
date-format-utils-xz-2026-07-22 date-format-utils-xz date-format-utils-xz | osv | 2026-07-22 21:08 UTC | MAL-2026-11001 | link |
housecall-ui-2026-07-20 housecall-ui housecall-ui | osv | 2026-07-20 13:35 UTC | MAL-2026-5446 | link |
flow-eslint-oxidized-2026-07-20 flow-eslint-oxidized flow-eslint-oxidized | osv | 2026-07-20 13:35 UTC | MAL-2026-10896 | link |
exodus-payments-2026-07-20 exodus-payments exodus-payments | osv | 2026-07-20 13:35 UTC | MAL-2026-10895 | link |
exodus-checkout-2026-07-20 exodus-checkout exodus-checkout | osv | 2026-07-20 13:35 UTC | MAL-2026-10894 | link |
ecto-cargo-wk1tm59a-2026-07-20 ecto-cargo-wk1tm59a ecto-cargo-wk1tm59a | osv | 2026-07-20 13:35 UTC | MAL-2026-10893 | link |
dgxeon-soket-2026-07-20 dgxeon-soket dgxeon-soket | osv | 2026-07-20 13:35 UTC | MAL-2026-1074 | link |
claude-code-timer-2026-07-20 claude-code-timer claude-code-timer | osv | 2026-07-20 13:34 UTC | MAL-2026-10892 | link |
ccl-component-resources-2026-07-20 ccl-component-resources ccl-component-resources | osv | 2026-07-20 13:34 UTC | MAL-2024-1959 | link |
bytecraft-2026-07-20 bytecraft bytecraft | osv | 2026-07-20 13:34 UTC | MAL-2026-10891 | link |
su-doughnym-metrics-js-2026-07-20 @su-doughnym/metrics-js @su-doughnym/metrics-js | osv | 2026-07-20 13:34 UTC | MAL-2026-6409 | link |
solana-labs-web3js-2026-07-20 @solana-labs/web3js @solana-labs/web3js | osv | 2026-07-20 13:33 UTC | MAL-2026-5788 | link |
solana-labs-web3-js-2026-07-20 @solana-labs/web3.js @solana-labs/web3.js | osv | 2026-07-20 13:33 UTC | MAL-2026-5525 | link |
solana-labs-spl-toke-2026-07-20 @solana-labs/spl-toke @solana-labs/spl-toke | osv | 2026-07-20 13:33 UTC | MAL-2026-5787 | link |
injectivelabs-ts-types-2026-07-20 @injectivelabs/ts-types · solana-labs @injectivelabs/ts-types | npm_registry | 2026-07-20 13:32 UTC | — | link |
injectivelabs-exceptions-2026-07-20 @injectivelabs/exceptions · solana-labs @injectivelabs/exceptions | npm_registry | 2026-07-20 13:32 UTC | — | link |
solana-labs-ancor-2026-07-20 @solana-labs/ancor @solana-labs/ancor | osv | 2026-07-20 13:31 UTC | MAL-2026-5786 | link |
public-for-cdao-utils-2026-07-20 @public-for-cdao/utils @public-for-cdao/utils | osv | 2026-07-20 13:31 UTC | MAL-2026-10889 | link |
public-for-cdao-signer-2026-07-20 @public-for-cdao/signer @public-for-cdao/signer | osv | 2026-07-20 13:30 UTC | MAL-2026-10888 | link |
public-for-cdao-sdk-2026-07-20 @public-for-cdao/sdk @public-for-cdao/sdk | osv | 2026-07-20 13:30 UTC | MAL-2026-10887 | link |
public-for-cdao-deploy-2026-07-20 @public-for-cdao/deploy @public-for-cdao/deploy | osv | 2026-07-20 13:30 UTC | MAL-2026-10886 | link |
public-for-cdao-core-2026-07-20 @public-for-cdao/core @public-for-cdao/core | osv | 2026-07-20 13:29 UTC | MAL-2026-10885 | link |
public-for-cdao-contracts-2026-07-20 @public-for-cdao/contracts @public-for-cdao/contracts | osv | 2026-07-20 13:29 UTC | MAL-2026-10884 | link |
public-for-cdao-bot-2026-07-20 @public-for-cdao/bot @public-for-cdao/bot | osv | 2026-07-20 13:29 UTC | MAL-2026-10883 | link |
public-for-cdao-backend-2026-07-20 @public-for-cdao/backend @public-for-cdao/backend | osv | 2026-07-20 13:28 UTC | MAL-2026-10882 | link |
irys-solutions-odesa-main-2026-07-20 @irys-solutions/odesa-main @irys-solutions/odesa-main | osv | 2026-07-20 13:27 UTC | MAL-2026-10881 | link |
dxcl-user-js-2026-07-20 @dxcl/user-js @dxcl/user-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10879 | link |
dxcl-transaction-js-2026-07-20 @dxcl/transaction-js @dxcl/transaction-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10878 | link |
dxcl-log-function-js-2026-07-20 @dxcl/log-function-js @dxcl/log-function-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10877 | link |
dxcl-indicators-js-2026-07-20 @dxcl/indicators-js @dxcl/indicators-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10876 | link |
dxcl-http-common-js-2026-07-20 @dxcl/http-common-js @dxcl/http-common-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10875 | link |
dxcl-fund-js-2026-07-20 @dxcl/fund-js @dxcl/fund-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10874 | link |
dxcl-customer-js-2026-07-20 @dxcl/customer-js @dxcl/customer-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10873 | link |
dxcl-account-js-2026-07-20 @dxcl/account-js @dxcl/account-js | osv | 2026-07-20 13:26 UTC | MAL-2026-10872 | link |
sip-lab-2026-07-20 sip-lab · azure-lab-services sip-lab | npm_registry | 2026-07-20 13:25 UTC | — | link |
azure-lab-services-ml-ts-2026-07-20 @azure-lab-services/ml-ts @azure-lab-services/ml-ts | osv | 2026-07-20 13:24 UTC | MAL-2026-10871 | link |
atlaskit-internal--smart-card-hover-card-2026-07-20 @atlaskit-internal_.smart-card/hover-card @atlaskit-internal_.smart-card/hover-card | osv | 2026-07-20 13:23 UTC | MAL-2026-10870 | link |
injectivelabs-utils-2026-07-19 @injectivelabs/utils · solana-labs @injectivelabs/utils | npm_deprecation | 2026-07-19 16:09 UTC | — | link |
n8n-nodes-probe-2026-07-18 n8n-nodes-probe n8n-nodes-probe | osv | 2026-07-18 07:15 UTC | MAL-2026-10777 | link |
n8n-nodes-final-mile-2026-07-18 n8n-nodes-final-mile n8n-nodes-final-mile | osv | 2026-07-18 07:14 UTC | MAL-2026-10776 | link |
n8n-nodes-devops-utils-2026-07-18 n8n-nodes-devops-utils n8n-nodes-devops-utils | osv | 2026-07-18 07:14 UTC | MAL-2026-10775 | link |
n8n-nodes-api-finder-2026-07-18 n8n-nodes-api-finder n8n-nodes-api-finder | osv | 2026-07-18 07:14 UTC | MAL-2026-10774 | link |
darkglitch-2026-07-16 darkglitch darkglitch | osv | 2026-07-16 19:15 UTC | MAL-2026-10756 | link |
ai-pro-sdk-2026-07-15 ai-pro-sdk ai-pro-sdk | osv | 2026-07-15 04:58 UTC | MAL-2026-10629 | link |
chain-sdk-js-2026-07-14 chain-sdk-js chain-sdk-js | osv | 2026-07-14 18:36 UTC | MAL-2026-10608 | link |
asyncapi-specs-2026-07-14 @asyncapi/specs · ddh-libraries @asyncapi/specs | osv | 2026-07-14 10:00 UTC | MAL-2025-190643 | link |
whatsadmaidk-2026-07-14 whatsadmaidk whatsadmaidk | osv | 2026-07-14 07:06 UTC | MAL-2026-10396 | link |
thebigyahu-2026-07-14 thebigyahu thebigyahu | osv | 2026-07-14 07:05 UTC | MAL-2026-10387 | link |
omgyesyesyes-2026-07-14 omgyesyesyes omgyesyesyes | osv | 2026-07-14 07:05 UTC | MAL-2026-10362 | link |
omglucidesotuff-2026-07-14 omglucidesotuff omglucidesotuff | osv | 2026-07-14 07:05 UTC | MAL-2026-10361 | link |
lowkirkuenly-2026-07-14 lowkirkuenly lowkirkuenly | osv | 2026-07-14 07:05 UTC | MAL-2026-10333 | link |
lowkeybored-2026-07-14 lowkeybored lowkeybored | osv | 2026-07-14 07:05 UTC | MAL-2026-10332 | link |
howmanygreatbritain-2026-07-14 howmanygreatbritain howmanygreatbritain | osv | 2026-07-14 07:05 UTC | MAL-2026-10304 | link |
fflc-updated-2026-07-14 fflc-updated fflc-updated | osv | 2026-07-14 07:05 UTC | MAL-2026-10301 | link |
crazynut-2026-07-14 crazynut crazynut | osv | 2026-07-14 07:05 UTC | MAL-2026-10299 | link |
captainindia-2026-07-14 captainindia captainindia | osv | 2026-07-14 07:05 UTC | MAL-2026-10297 | link |
bomboclatwallahi-2026-07-14 bomboclatwallahi bomboclatwallahi | osv | 2026-07-14 07:05 UTC | MAL-2026-10296 | link |
bismillahitidakimas-2026-07-14 bismillahitidakimas bismillahitidakimas | osv | 2026-07-14 07:05 UTC | MAL-2026-10295 | link |
miguelphonk-2026-07-14 miguelphonk miguelphonk | osv | 2026-07-14 06:03 UTC | MAL-2026-10335 | link |
postcss-processor-utils-2026-07-14 postcss-processor-utils postcss-processor-utils | osv | 2026-07-14 04:45 UTC | MAL-2026-10540 | link |
node-fsmetrics-data-2026-07-13 node-fsmetrics-data node-fsmetrics-data | osv | 2026-07-13 20:46 UTC | MAL-2026-10479 | link |
node-path-addon-2026-07-13 node-path-addon node-path-addon | osv | 2026-07-13 18:27 UTC | MAL-2026-10463 | link |
cktool-core-2026-07-13 cktool-core cktool-core | osv | 2026-07-13 18:27 UTC | MAL-2026-10457 | link |
spzhongwin-skill-logger-plugin-2026-07-13 @spzhongwin/skill-logger-plugin @spzhongwin/skill-logger-plugin | osv | 2026-07-13 18:27 UTC | MAL-2026-10456 | link |
ratelimitsucks-2026-07-13 ratelimitsucks ratelimitsucks | osv | 2026-07-13 10:43 UTC | MAL-2026-6135 | link |
jsonfb-2026-07-13 jsonfb jsonfb | osv | 2026-07-13 10:43 UTC | MAL-2026-10437 | link |
backup3-ff-2026-07-13 backup3-ff backup3-ff | osv | 2026-07-13 10:42 UTC | MAL-2026-10287 | link |
terminal-mascot-2026-07-13 terminal-mascot terminal-mascot | osv | 2026-07-13 08:01 UTC | MAL-2026-10424 | link |
awesome-terminal-2026-07-13 awesome-terminal awesome-terminal | osv | 2026-07-13 08:01 UTC | MAL-2026-10407 | link |
svgcraft-core-2026-07-12 svgcraft-core svgcraft-core | osv | 2026-07-12 00:03 UTC | MAL-2026-6715 | link |
ggk-happy-2026-07-10 ggk-happy ggk-happy | osv | 2026-07-10 17:15 UTC | MAL-2026-4789 | link |
express-mongo-limit-2026-07-10 express-mongo-limit express-mongo-limit | osv | 2026-07-10 17:15 UTC | MAL-2026-7012 | link |
uac-package-2026-07-10 uac-package uac-package | osv | 2026-07-10 16:27 UTC | MAL-2026-10138 | link |
px8my-2026-07-10 px8my px8my | osv | 2026-07-10 00:39 UTC | MAL-2026-10104 | link |
vite-enhancer-config-2026-07-09 vite-enhancer-config vite-enhancer-config | osv | 2026-07-09 14:09 UTC | MAL-2026-5850 | link |
transportator-2026-07-09 transportator transportator | osv | 2026-07-09 14:09 UTC | MAL-2026-5700 | link |
doctolib-apps-native-personalized-services-2026-07-09 @doctolib-apps/native-personalized-services @doctolib-apps/native-personalized-services | osv | 2026-07-09 13:52 UTC | MAL-2026-4186 | link |
chai-as-vec-2026-07-09 chai-as-vec chai-as-vec | osv | 2026-07-09 13:52 UTC | MAL-2026-4168 | link |
modern-events-2026-07-09 modern-events modern-events | osv | 2026-07-09 13:46 UTC | MAL-2026-2914 | link |
chai-as-elevated-2026-07-09 chai-as-elevated chai-as-elevated | osv | 2026-07-09 13:46 UTC | MAL-2026-2887 | link |
chai-use-chain-2026-07-09 chai-use-chain chai-use-chain | osv | 2026-07-09 13:45 UTC | MAL-2026-2743 | link |
pycryptoshuffle-2026-07-09 pycryptoshuffle pycryptoshuffle | osv | 2026-07-09 13:31 UTC | MAL-2026-7458 | link |
chai-smart-assert-2026-07-09 chai-smart-assert chai-smart-assert | agent | 2026-07-09 04:42 UTC | MAL-2026-5843 | link |
vite-js-ui-2026-07-09 @vite-js/ui @vite-js/ui | osv | 2026-07-09 00:53 UTC | MAL-2026-7021 | link |
zod-pino444-2026-07-07 zod-pino444 zod-pino444 | osv | 2026-07-07 20:17 UTC | MAL-2026-6795 | link |
hello244a-2026-07-03 hello244a hello244a | osv | 2026-07-03 21:18 UTC | MAL-2026-5188 | link |
vitest-agent-2026-07-01 vitest-agent vitest-agent | osv | 2026-07-01 22:50 UTC | MAL-2026-6710 | link |
polymarket-trading-developer-tools-2026-07-01 polymarket-trading-developer-tools polymarket-trading-developer-tools | osv | 2026-07-01 22:50 UTC | MAL-2026-6692 | link |
polymarket-clob-maths-2026-07-01 polymarket-clob-maths polymarket-clob-maths | osv | 2026-07-01 22:50 UTC | MAL-2026-6691 | link |
log-taker1-2026-07-01 log-taker1 log-taker1 | osv | 2026-07-01 22:50 UTC | MAL-2026-6690 | link |
decimal-format-core-2026-07-01 decimal-format-core decimal-format-core | osv | 2026-07-01 00:34 UTC | MAL-2026-6689 | link |
businessapp-microsites-apis-2026-07-01 @businessapp-microsites/apis @businessapp-microsites/apis | osv | 2026-07-01 00:34 UTC | MAL-2026-6696 | link |
anthropic-toolkit-2026-06-30 anthropic-toolkit anthropic-toolkit | osv | 2026-06-30 18:21 UTC | MAL-2026-6673 | link |
yastatic-s3-2026-06-29 yastatic-s3 yastatic-s3 | osv | 2026-06-29 15:58 UTC | MAL-2026-6586 | link |
stake-math-2026-06-29 stake-math stake-math | osv | 2026-06-29 15:58 UTC | MAL-2026-6585 | link |
poly-kelly-2026-06-29 poly-kelly poly-kelly | osv | 2026-06-29 15:58 UTC | MAL-2026-6584 | link |
openai-agents-helpers-2026-06-29 openai-agents-helpers openai-agents-helpers | osv | 2026-06-29 15:58 UTC | MAL-2026-6582 | link |
ollama-helpers-2026-06-29 ollama-helpers ollama-helpers | osv | 2026-06-29 15:58 UTC | MAL-2026-6581 | link |
loadutils-2026-06-29 loadutils loadutils | osv | 2026-06-29 15:58 UTC | MAL-2026-6580 | link |
ibrahim1337-baksen-2026-06-29 @ibrahim1337/baksen @ibrahim1337/baksen | osv | 2026-06-29 15:58 UTC | MAL-2026-6575 | link |
methodology
How entries are defined
Registered is the earliest first_seen_at from supply_chain_compromised_versions: the point at which the API began returning compromised: true for those versions.
OSV is a citation to the linked advisory when Attestd has one. Most live entries are registered from the OSV ingestion pipeline. An OSV link means Attestd indexed that advisory; it is not a claim that Attestd published first.
Citation is the primary advisory URL, a press URL when recorded, or the OSV page.
Detection source discloses how the incident entered Attestd. osv is the OSV MAL pipeline. registry is curated registry YAML. npm_deprecation and pypi_yank are registry-native security signals. news_monitor and agent are corroborated news or agent promotions.
Commits are public on GitHub. Manual historical sync may use GPG signing when configured. Live auto-push uses the GitHub Git Data API so incident files and ledger.json update together. Verify history with git log in the repository.
related