docs / detection-ledger
Detection Ledger
A public commit record of supply chain compromise incidents registered by Attestd. Each incident lists packages, versions, how Attestd registered the signal, and OSV or advisory citations when available.
Entries are pushed to a public GitHub repository. Commit timestamps show when the ledger entry was published. This is an archive of what Attestd registered, not a claim that Attestd beat OSV or press.
Three entries are worth reading in full: VS Code Fake Font, flagged five days before JFrog's disclosure, the Shai-Hulud attack on TanStack and Mistral, flagged roughly two and a half hours before BleepingComputer's coverage, and the AsyncAPI re-compromise, caught by live monitoring rather than a lookup against the original advisory.
detection record
16245 incidents across npm and pypi. 15273 with an OSV citation (53 demo or sandbox entries hidden). 15853 verifiable within 24 hours of registration; 392 historical.
Show all entries including demos
Full commit history and JSON artifacts: github.com/attestd-io/detection-ledger
verifiable incidents
Incidents committed to the ledger within 24 hours of registration. GitHub commit time matches detection time for these entries.
Showing 100 of 15853. Show all in this section · Full ledger.json
| Incident | Source | Registered | OSV | Citation |
|---|---|---|---|---|
arcotest2-2026-09-07 arcotest2 arcotest2 | osv | 2026-09-07 13:16 UTC | MAL-2023-8245 | link |
arcotest1-2026-09-07 arcotest1 arcotest1 | osv | 2026-09-07 13:16 UTC | MAL-2023-8244 | link |
peekatchuysharnlesspackage-2026-09-07 peekatchuysharnlesspackage peekatchuysharnlesspackage | osv | 2026-09-07 13:16 UTC | MAL-2023-8240 | link |
sword123-2026-09-07 sword123 sword123 | osv | 2026-09-07 13:16 UTC | MAL-2023-824 | link |
peekatchuysharmlesspackage-2026-09-07 peekatchuysharmlesspackage peekatchuysharmlesspackage | osv | 2026-09-07 13:16 UTC | MAL-2023-8239 | link |
manhdzfca-2026-09-07 manhdzfca manhdzfca | osv | 2026-09-07 13:15 UTC | MAL-2023-8238 | link |
gradient-async-2026-09-07 gradient-async gradient-async | osv | 2026-09-07 13:15 UTC | MAL-2023-8237 | link |
fca-rqzax-v3-2026-09-07 fca-rqzax-v3 fca-rqzax-v3 | osv | 2026-09-07 13:15 UTC | MAL-2023-8236 | link |
fca-manhdz2004-2026-09-07 fca-manhdz2004 fca-manhdz2004 | osv | 2026-09-07 13:15 UTC | MAL-2023-8235 | link |
fca-get-2026-09-07 fca-get fca-get | osv | 2026-09-07 13:15 UTC | MAL-2023-8234 | link |
fca-bot-asuna-2026-09-07 fca-bot-asuna fca-bot-asuna | osv | 2026-09-07 13:15 UTC | MAL-2023-8233 | link |
facebook-asuna-api-2026-09-07 facebook-asuna-api facebook-asuna-api | osv | 2026-09-07 13:15 UTC | MAL-2023-8232 | link |
chat-api-asuna-2026-09-07 chat-api-asuna chat-api-asuna | osv | 2026-09-07 13:15 UTC | MAL-2023-8230 | link |
chat-asuna-api-2026-09-07 chat-asuna-api chat-asuna-api | osv | 2026-09-07 13:15 UTC | MAL-2023-8231 | link |
bot-asuna-temp-2026-09-07 bot-asuna-temp bot-asuna-temp | osv | 2026-09-07 13:15 UTC | MAL-2023-8229 | link |
beta-fhr-nxt-2026-09-07 beta-fhr-nxt beta-fhr-nxt | osv | 2026-09-07 13:15 UTC | MAL-2023-8228 | link |
sentrybrowser5-2026-09-07 sentrybrowser5 sentrybrowser5 | osv | 2026-09-07 13:15 UTC | MAL-2023-8213 | link |
superagtn-2026-09-07 superagtn superagtn | osv | 2026-09-07 13:15 UTC | MAL-2023-820 | link |
afterpay-2026-09-07 afterpay afterpay | osv | 2026-09-07 13:15 UTC | MAL-2023-82 | link |
dot-environment-2026-09-07 dot-environment dot-environment | osv | 2026-09-07 13:15 UTC | MAL-2023-8186 | link |
team-atf-3-2026-09-07 team-atf-3 team-atf-3 | osv | 2026-09-07 13:15 UTC | MAL-2023-8183 | link |
team-atf-2026-09-07 team-atf team-atf | osv | 2026-09-07 13:15 UTC | MAL-2023-8182 | link |
synth-fhr-db-2026-09-07 synth-fhr-db synth-fhr-db | osv | 2026-09-07 13:15 UTC | MAL-2023-8181 | link |
simple-team-api-2026-09-07 simple-team-api simple-team-api | osv | 2026-09-07 13:15 UTC | MAL-2023-8180 | link |
supchat-plugins-2026-09-07 supchat-plugins supchat-plugins | osv | 2026-09-07 13:15 UTC | MAL-2023-818 | link |
fca-jordan-2026-09-07 fca-jordan fca-jordan | osv | 2026-09-07 13:15 UTC | MAL-2023-8178 | link |
fca-dongdz2006-2026-09-07 fca-dongdz2006 fca-dongdz2006 | osv | 2026-09-07 13:15 UTC | MAL-2023-8177 | link |
fca-chana-2026-09-07 fca-chana fca-chana | osv | 2026-09-07 13:15 UTC | MAL-2023-8176 | link |
fca-cat-api-2026-09-07 fca-cat-api fca-cat-api | osv | 2026-09-07 13:15 UTC | MAL-2023-8174 | link |
fca-chan-2026-09-07 fca-chan fca-chan | osv | 2026-09-07 13:15 UTC | MAL-2023-8175 | link |
fca-abdulla-api-2026-09-07 fca-abdulla-api fca-abdulla-api | osv | 2026-09-07 13:15 UTC | MAL-2023-8173 | link |
fb-chat-api-temp-2026-09-07 fb-chat-api-temp fb-chat-api-temp | osv | 2026-09-07 13:15 UTC | MAL-2023-8172 | link |
chand-trick-2026-09-07 chand-trick chand-trick | osv | 2026-09-07 13:14 UTC | MAL-2023-8171 | link |
apka-papa-chand-2026-09-07 apka-papa-chand apka-papa-chand | osv | 2026-09-07 13:14 UTC | MAL-2023-8169 | link |
virtualsearchtable-virtualsearchtable-2026-09-07 @virtualsearchtable/virtualsearchtable @virtualsearchtable/virtualsearchtable | osv | 2026-09-07 13:14 UTC | MAL-2023-8168 | link |
spgy-eslint-plugin-spgy-fe-2026-09-07 @spgy/eslint-plugin-spgy-fe @spgy/eslint-plugin-spgy-fe | osv | 2026-09-07 13:14 UTC | MAL-2023-8167 | link |
transx402-client-2026-09-07 @transx402/client · klapp-settlement @transx402/client | npm_registry | 2026-09-07 13:14 UTC | — | link |
su-record-vibe-2026-09-07 @su-record/vibe · klapp-settlement @su-record/vibe | npm_registry | 2026-09-07 13:14 UTC | — | link |
relay-protocol-lit-actions-2026-09-07 @relay-protocol/lit-actions · klapp-settlement @relay-protocol/lit-actions | npm_registry | 2026-09-07 13:14 UTC | — | link |
pandascore-odds-sdk-2026-09-07 @pandascore/odds-sdk · klapp-settlement @pandascore/odds-sdk | npm_registry | 2026-09-07 13:14 UTC | — | link |
klapp-settlement-store-2026-09-07 @klapp-settlement/store @klapp-settlement/store | osv | 2026-09-07 13:13 UTC | MAL-2023-8166 | link |
stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes-2026-09-07 stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes- stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes- | osv | 2026-09-07 13:12 UTC | MAL-2023-816 | link |
truffle-gas-report-2026-09-07 truffle-gas-report truffle-gas-report | osv | 2026-09-07 13:12 UTC | MAL-2023-8158 | link |
thinhdz2001-fb-2026-09-07 thinhdz2001-fb thinhdz2001-fb | osv | 2026-09-07 13:12 UTC | MAL-2023-8157 | link |
thinhdz-fb-2026-09-07 thinhdz-fb thinhdz-fb | osv | 2026-09-07 13:12 UTC | MAL-2023-8155 | link |
thinhdz2001-api-2026-09-07 thinhdz2001-api thinhdz2001-api | osv | 2026-09-07 13:12 UTC | MAL-2023-8156 | link |
thinhdz-chat-api-2026-09-07 thinhdz-chat-api thinhdz-chat-api | osv | 2026-09-07 13:12 UTC | MAL-2023-8154 | link |
thinhdz-api-2026-09-07 thinhdz-api thinhdz-api | osv | 2026-09-07 13:12 UTC | MAL-2023-8153 | link |
symbl-ai-2026-09-07 symbl_ai symbl_ai | osv | 2026-09-07 13:12 UTC | MAL-2023-8149 | link |
nvthinhdz-api-2026-09-07 nvthinhdz-api nvthinhdz-api | osv | 2026-09-07 13:12 UTC | MAL-2023-8147 | link |
rodashe-2026-09-07 rodashe rodashe | osv | 2026-09-07 13:12 UTC | MAL-2023-8148 | link |
nvthinh2001-api-2026-09-07 nvthinh2001-api nvthinh2001-api | osv | 2026-09-07 13:12 UTC | MAL-2023-8146 | link |
nvt2001-api-2026-09-07 nvt2001-api nvt2001-api | osv | 2026-09-07 13:12 UTC | MAL-2023-8145 | link |
loudashe-2026-09-07 loudashe loudashe | osv | 2026-09-07 13:12 UTC | MAL-2023-8143 | link |
master-vanthinh-2026-09-07 master-vanthinh master-vanthinh | osv | 2026-09-07 13:12 UTC | MAL-2023-8144 | link |
lodarshe-2026-09-07 lodarshe lodarshe | osv | 2026-09-07 13:12 UTC | MAL-2023-8142 | link |
helyt-2026-09-07 helyt helyt | osv | 2026-09-07 13:12 UTC | MAL-2023-8141 | link |
hardhat-gas-tracer-2026-09-07 hardhat-gas-tracer hardhat-gas-tracer | osv | 2026-09-07 13:12 UTC | MAL-2023-8140 | link |
hardhat-gas-report-2026-09-07 hardhat-gas-report hardhat-gas-report | osv | 2026-09-07 13:12 UTC | MAL-2023-8139 | link |
hardhat-contract-size-2026-09-07 hardhat-contract-size hardhat-contract-size | osv | 2026-09-07 13:12 UTC | MAL-2023-8138 | link |
hadhat-contract-sizer-2026-09-07 hadhat-contract-sizer hadhat-contract-sizer | osv | 2026-09-07 13:12 UTC | MAL-2023-8137 | link |
fce-vanthinh-2026-09-07 fce-vanthinh fce-vanthinh | osv | 2026-09-07 13:12 UTC | MAL-2023-8136 | link |
fca-nvt-2026-09-07 fca-nvt fca-nvt | osv | 2026-09-07 13:12 UTC | MAL-2023-8133 | link |
fca-bucu-2026-09-07 fca-bucu fca-bucu | osv | 2026-09-07 13:12 UTC | MAL-2023-8131 | link |
etheres-js-2026-09-07 etheres.js etheres.js | osv | 2026-09-07 13:12 UTC | MAL-2023-8130 | link |
eterscan-api-2026-09-07 eterscan-api eterscan-api | osv | 2026-09-07 13:12 UTC | MAL-2023-8129 | link |
eters-js-2026-09-07 eters.js eters.js | osv | 2026-09-07 13:12 UTC | MAL-2023-8128 | link |
eteres-2026-09-07 eteres eteres | osv | 2026-09-07 13:12 UTC | MAL-2023-8127 | link |
statbox-bindings2-2026-09-07 statbox-bindings2 statbox-bindings2 | osv | 2026-09-07 13:12 UTC | MAL-2023-812 | link |
purplebricks-frontend-core-2026-09-07 purplebricks-frontend-core purplebricks-frontend-core | osv | 2026-09-07 13:12 UTC | MAL-2023-8105 | link |
fca-dongsexx-2026-09-07 fca-dongsexx fca-dongsexx | osv | 2026-09-07 13:12 UTC | MAL-2023-8104 | link |
starbuckssystem-2026-09-07 starbuckssystem starbuckssystem | osv | 2026-09-07 13:11 UTC | MAL-2023-810 | link |
afisha-ab-2026-09-07 afisha-ab afisha-ab | osv | 2026-09-07 13:11 UTC | MAL-2023-81 | link |
xweb-3-0-util-lib-2026-09-07 xweb_3.0_util_lib xweb_3.0_util_lib | osv | 2026-09-07 13:11 UTC | MAL-2023-8096 | link |
xweb-3-0-rootlib-2026-09-07 xweb_3.0_rootlib xweb_3.0_rootlib | osv | 2026-09-07 13:11 UTC | MAL-2023-8095 | link |
xweb-3-0-component-lib-2026-09-07 xweb_3.0_component_lib xweb_3.0_component_lib | osv | 2026-09-07 13:11 UTC | MAL-2023-8094 | link |
react-morning-2026-09-07 react-morning react-morning | osv | 2026-09-07 13:11 UTC | MAL-2023-8092 | link |
cloud-message-sdks-2026-09-07 cloud-message-sdks cloud-message-sdks | osv | 2026-09-07 13:11 UTC | MAL-2023-8090 | link |
standforusz-2026-09-07 standforusz standforusz | osv | 2026-09-07 13:11 UTC | MAL-2023-809 | link |
antdesignpro2021-2026-09-07 antdesignpro2021 antdesignpro2021 | osv | 2026-09-07 13:11 UTC | MAL-2023-8089 | link |
web3tool-validator-2026-09-07 web3tool-validator web3tool-validator | osv | 2026-09-07 13:11 UTC | MAL-2023-8087 | link |
web3tool-providers-ws-2026-09-07 web3tool-providers-ws web3tool-providers-ws | osv | 2026-09-07 13:11 UTC | MAL-2023-8086 | link |
web3tool-providers-http-2026-09-07 web3tool-providers-http web3tool-providers-http | osv | 2026-09-07 13:11 UTC | MAL-2023-8085 | link |
web3tool-eth-ens-2026-09-07 web3tool-eth-ens web3tool-eth-ens | osv | 2026-09-07 13:11 UTC | MAL-2023-8083 | link |
web3tool-eth-personal-2026-09-07 web3tool-eth-personal web3tool-eth-personal | osv | 2026-09-07 13:11 UTC | MAL-2023-8084 | link |
web3tool-eth-accounts-2026-09-07 web3tool-eth-accounts web3tool-eth-accounts | osv | 2026-09-07 13:11 UTC | MAL-2023-8082 | link |
web3tool-eth-2026-09-07 web3tool-eth web3tool-eth | osv | 2026-09-07 13:11 UTC | MAL-2023-8081 | link |
web3tool-core-2026-09-07 web3tool-core web3tool-core | osv | 2026-09-07 13:11 UTC | MAL-2023-8080 | link |
web3-react-core-2026-09-07 web3-react-core web3-react-core | osv | 2026-09-07 13:11 UTC | MAL-2023-8079 | link |
stake-fish-2026-09-07 stake.fish stake.fish | osv | 2026-09-07 13:11 UTC | MAL-2023-808 | link |
testingsomethingforscanner-2026-09-07 testingsomethingforscanner testingsomethingforscanner | osv | 2026-09-07 13:11 UTC | MAL-2023-8077 | link |
solidity-tracer-2026-09-07 solidity-tracer solidity-tracer | osv | 2026-09-07 13:11 UTC | MAL-2023-8076 | link |
portal-env-2026-09-07 portal-env portal-env | osv | 2026-09-07 13:11 UTC | MAL-2023-8075 | link |
newtesttocheckscanner-2026-09-07 newtesttocheckscanner newtesttocheckscanner | osv | 2026-09-07 13:10 UTC | MAL-2023-8074 | link |
limitd-protocol-2026-09-07 limitd-protocol limitd-protocol | osv | 2026-09-07 13:10 UTC | MAL-2023-8073 | link |
ethereum-cryptograph-2026-09-07 ethereum-cryptograph ethereum-cryptograph | osv | 2026-09-07 13:10 UTC | MAL-2023-8072 | link |
eth-web3-tx-2026-09-07 eth-web3-tx eth-web3-tx | osv | 2026-09-07 13:10 UTC | MAL-2023-8071 | link |
discord-js-selfv20-2026-09-07 discord.js-selfv20 discord.js-selfv20 | osv | 2026-09-07 13:10 UTC | MAL-2023-8070 | link |
staff-www-2026-09-07 staff-www staff-www | osv | 2026-09-07 13:10 UTC | MAL-2023-807 | link |
cxday-2026-09-07 cxday cxday | osv | 2026-09-07 13:10 UTC | MAL-2023-8069 | link |
historical incidents
Incidents registered before the ledger repository existed, or without a matching near-real-time commit. The registered timestamp reflects internal database records where available.
Showing 100 of 392. Show all in this section · Full ledger.json
| Incident | Source | Registered | OSV | Citation |
|---|---|---|---|---|
stellarshift-token-units-2026-09-02 @stellarshift/token-units @stellarshift/token-units | osv | 2026-09-02 22:27 UTC | MAL-2026-15824 | link |
stellarshift-evm-address-kit-2026-09-02 @stellarshift/evm-address-kit @stellarshift/evm-address-kit | osv | 2026-09-02 22:27 UTC | MAL-2026-15823 | link |
stellarshift-chain-metadata-2026-09-02 @stellarshift/chain-metadata @stellarshift/chain-metadata | osv | 2026-09-02 22:27 UTC | MAL-2026-15822 | link |
stellarshift-abi-tools-2026-09-02 @stellarshift/abi-tools @stellarshift/abi-tools | osv | 2026-09-02 22:27 UTC | MAL-2026-15821 | link |
eslint-rxjs-2026-09-02 eslint-rxjs eslint-rxjs | osv | 2026-09-02 02:52 UTC | MAL-2026-15812 | link |
evilpostinstall-2026-08-31 evilpostinstall evilpostinstall | osv | 2026-08-31 18:31 UTC | MAL-2026-15625 | link |
npx-oob-package-2026-08-30 npx-oob-package npx-oob-package | osv | 2026-08-30 23:25 UTC | MAL-2026-15597 | link |
testrelic-playwright-analytics-2026-08-29 @testrelic/playwright-analytics @testrelic/playwright-analytics | osv | 2026-08-29 03:23 UTC | MAL-2026-15565 | link |
vs-modules-2026-08-29 vs-modules vs-modules | osv | 2026-08-29 02:37 UTC | MAL-2026-15564 | link |
techportal-2026-08-29 techportal techportal | osv | 2026-08-29 02:37 UTC | MAL-2026-15561 | link |
mfacord-2026-08-29 mfacord mfacord | osv | 2026-08-29 02:37 UTC | MAL-2026-15557 | link |
7nohe-openapi-react-query-codegen-2026-08-28 @7nohe/openapi-react-query-codegen · 7nohe @7nohe/openapi-react-query-codegen | npm_deprecation | 2026-08-28 22:54 UTC | MAL-2026-15494 | link |
html-to-gutenberg-2026-08-28 html-to-gutenberg html-to-gutenberg | osv | 2026-08-28 17:50 UTC | MAL-2026-6359 | link |
tailwindcss-3d-animate-2026-08-27 tailwindcss-3d-animate tailwindcss-3d-animate | osv | 2026-08-27 18:57 UTC | MAL-2026-14567 | link |
chai-plus-2026-08-26 chai-plus chai-plus | osv | 2026-08-26 14:25 UTC | MAL-2026-14533 | link |
fetch-page-assets-2026-08-25 fetch-page-assets fetch-page-assets | osv | 2026-08-25 06:56 UTC | MAL-2026-6358 | link |
agentgui-2026-08-24 agentgui · transaction-history agentgui | osv | 2026-08-24 08:44 UTC | MAL-2026-14402 | link |
rollup-packages-polyfill-core-2026-08-23 rollup-packages-polyfill-core rollup-packages-polyfill-core | osv | 2026-08-23 03:46 UTC | MAL-2026-10160 | link |
syncraft-labs-vue-2026-08-23 @syncraft-labs/vue @syncraft-labs/vue | osv | 2026-08-23 03:44 UTC | MAL-2026-14369 | link |
syncraft-labs-react-2026-08-23 @syncraft-labs/react @syncraft-labs/react | osv | 2026-08-23 03:44 UTC | MAL-2026-14368 | link |
syncraft-labs-core-2026-08-23 @syncraft-labs/core @syncraft-labs/core | osv | 2026-08-23 03:42 UTC | MAL-2026-14367 | link |
evm-validation-2026-08-19 evm-validation evm-validation | osv | 2026-08-19 10:51 UTC | MAL-2026-14301 | link |
mc-registry-2026-08-19 mc-registry mc-registry | osv | 2026-08-19 09:04 UTC | MAL-2026-14294 | link |
mc-reg-2026-08-19 mc-reg mc-reg | osv | 2026-08-19 09:04 UTC | MAL-2026-10637 | link |
wizloft-harness-2026-08-19 @wizloft/harness @wizloft/harness | osv | 2026-08-19 09:04 UTC | MAL-2026-14285 | link |
wizloft-harness-validation-2026-08-19 @wizloft/harness-validation @wizloft/harness-validation | osv | 2026-08-19 09:04 UTC | MAL-2026-14289 | link |
wizloft-harness-plugin-repository-files-2026-08-19 @wizloft/harness-plugin-repository-files @wizloft/harness-plugin-repository-files | osv | 2026-08-19 09:04 UTC | MAL-2026-14288 | link |
wizloft-harness-kernel-2026-08-19 @wizloft/harness-kernel @wizloft/harness-kernel | osv | 2026-08-19 09:04 UTC | MAL-2026-14287 | link |
wizloft-harness-context-2026-08-19 @wizloft/harness-context @wizloft/harness-context | osv | 2026-08-19 09:04 UTC | MAL-2026-14286 | link |
ai-texts-2026-08-19 ai-texts ai-texts | osv | 2026-08-19 03:27 UTC | MAL-2026-14217 | link |
snavbox-2026-08-16 snavbox snavbox | osv | 2026-08-16 16:20 UTC | MAL-2025-49362 | link |
finaxis-common-js-2026-08-15 @finaxis/common-js @finaxis/common-js | osv | 2026-08-15 17:15 UTC | MAL-2026-14064 | link |
vapi-ai-server-sdk-2026-08-14 @vapi-ai/server-sdk @vapi-ai/server-sdk | npm_deprecation | 2026-08-14 19:39 UTC | MAL-2026-5209 | link |
effect-analyzer-2026-08-14 effect-analyzer effect-analyzer | npm_deprecation | 2026-08-14 04:27 UTC | MAL-2026-5245 | link |
syspo-2026-08-13 syspo syspo | osv | 2026-08-13 17:35 UTC | MAL-2026-6406 | link |
sysb1-2026-08-13 sysb1 sysb1 | osv | 2026-08-13 17:35 UTC | MAL-2026-10428 | link |
dakumangalsingh-2026-08-12 dakumangalsingh dakumangalsingh | osv | 2026-08-12 13:13 UTC | MAL-2026-13879 | link |
dgn-src-click-to-pay-org-srcdcfreleasecert-2026-08-11 @dgn-src-click-to-pay-org/srcdcfreleasecert @dgn-src-click-to-pay-org/srcdcfreleasecert | osv | 2026-08-11 19:01 UTC | MAL-2026-13744 | link |
env-local-2026-08-10 env-local env-local | osv | 2026-08-10 12:40 UTC | MAL-2026-13694 | link |
tokocrytodev-2026-08-10 tokocrytodev tokocrytodev | osv | 2026-08-10 12:09 UTC | MAL-2026-13687 | link |
eslint-plugin-prettier-2026-08-09 eslint-plugin-prettier · dbk-legacy eslint-plugin-prettier | npm_registry | 2026-08-09 04:53 UTC | GHSA-f29h-pxvx-f335 | link |
chegg-me-components-header-2026-08-09 @chegg-me-components/header @chegg-me-components/header | osv | 2026-08-09 04:31 UTC | MAL-2022-168 | link |
brave-ios-2026-08-09 brave-ios brave-ios | osv | 2026-08-09 04:30 UTC | MAL-2022-1673 | link |
renovate-2026-08-09 renovate · bynder-private renovate | npm_registry | 2026-08-09 04:25 UTC | GHSA-36j9-mx87-2cff | link |
bip174-bigint-2026-08-09 bip174-bigint bip174-bigint | osv | 2026-08-09 04:22 UTC | MAL-2022-1582 | link |
things-factory-integration-base-2026-08-09 @things-factory/integration-base · bugbounty-automation @things-factory/integration-base | npm_registry | 2026-08-09 04:22 UTC | MAL-2025-47223 | link |
browserbasehq-sdk-functions-2026-08-09 @browserbasehq/sdk-functions · bugbounty-automation @browserbasehq/sdk-functions | npm_registry | 2026-08-09 04:21 UTC | MAL-2025-191197 | link |
toptal-picasso-2026-08-09 @toptal/picasso · bootstrap-base-managed-designs @toptal/picasso | npm_registry | 2026-08-09 04:16 UTC | MAL-2025-6038 | link |
redhat-cloud-services-eslint-config-redhat-cloud-services-2026-08-09 @redhat-cloud-services/eslint-config-redhat-cloud-services · bitmex-frontend-team @redhat-cloud-services/eslint-config-redhat-cloud-services | npm_registry | 2026-08-09 03:59 UTC | MAL-2026-5112 | link |
rbx-ts-services-2026-08-08 @rbx-ts/services @rbx-ts/services | osv | 2026-08-08 01:07 UTC | MAL-2026-13630 | link |
big-tss-2026-08-07 big-tss big-tss | osv | 2026-08-07 15:02 UTC | MAL-2026-13613 | link |
nms-dashboard-js-2026-08-06 nms-dashboard-js nms-dashboard-js | osv | 2026-08-06 23:44 UTC | MAL-2026-13451 | link |
jagproject-2026-08-06 jagproject jagproject | osv | 2026-08-06 15:25 UTC | MAL-2026-13402 | link |
agenttunnels-2026-08-06 agenttunnels agenttunnels | osv | 2026-08-06 15:25 UTC | MAL-2026-13400 | link |
onescience-onecode-2026-08-06 @onescience/onecode @onescience/onecode | osv | 2026-08-06 13:20 UTC | MAL-2026-10717 | link |
golaaa-2026-08-06 golaaa golaaa | osv | 2026-08-06 12:33 UTC | MAL-2026-13392 | link |
signetai-signet-memory-openclaw-2026-08-06 @signetai/signet-memory-openclaw @signetai/signet-memory-openclaw | osv | 2026-08-06 03:20 UTC | MAL-2026-4445 | link |
signetai-signet-memory-openclaw-2026-08-05 @signetai/signet-memory-openclaw @signetai/signet-memory-openclaw | osv | 2026-08-05 21:24 UTC | MAL-2026-4445 | link |
workoscalif-sudoku-2026-08-05 @workoscalif/sudoku @workoscalif/sudoku | osv | 2026-08-05 19:23 UTC | MAL-2026-13366 | link |
uzair-rajput-new-2026-08-05 uzair-rajput-new uzair-rajput-new | osv | 2026-08-05 18:21 UTC | MAL-2026-13360 | link |
hehehee-2026-08-05 hehehee hehehee | osv | 2026-08-05 18:20 UTC | MAL-2026-10462 | link |
telemetry-metrics-2026-08-05 telemetry-metrics telemetry-metrics | osv | 2026-08-05 15:18 UTC | MAL-2026-10750 | link |
sapappgyver-appgyver-descriptors-2026-08-05 @sapappgyver/appgyver-descriptors @sapappgyver/appgyver-descriptors | osv | 2026-08-05 14:28 UTC | MAL-2026-12507 | link |
cy4dev-cydemo-bg-color-2026-08-05 @cy4dev/cydemo-bg-color @cy4dev/cydemo-bg-color | osv | 2026-08-05 14:25 UTC | MAL-2026-12504 | link |
tt-help-cli-ycl-2026-08-05 tt-help-cli-ycl tt-help-cli-ycl | osv | 2026-08-05 13:21 UTC | MAL-2026-12488 | link |
table-ui-new-2026-08-05 table-ui-new table-ui-new | osv | 2026-08-05 13:21 UTC | MAL-2026-12473 | link |
sn-flow-client-2026-08-05 sn-flow-client sn-flow-client | osv | 2026-08-05 13:20 UTC | MAL-2024-9443 | link |
quorvex-2026-08-05 quorvex quorvex | osv | 2026-08-05 13:20 UTC | MAL-2026-12422 | link |
electrode-ota-ui-app-2026-08-05 electrode-ota-ui-app electrode-ota-ui-app | osv | 2026-08-05 13:19 UTC | MAL-2026-12368 | link |
crypto-javas-2026-08-05 crypto-javas crypto-javas | osv | 2026-08-05 13:18 UTC | MAL-2026-12359 | link |
croft-node-2026-08-05 croft-node croft-node | osv | 2026-08-05 13:18 UTC | MAL-2026-12358 | link |
akamaijs-sensor-2026-08-05 akamaijs-sensor akamaijs-sensor | osv | 2026-08-05 13:18 UTC | MAL-2026-12337 | link |
wololasod-tiny-id-2026-08-05 @wololasod/tiny-id @wololasod/tiny-id | osv | 2026-08-05 13:18 UTC | MAL-2026-12331 | link |
lizhao1-memorax-code-internal-2026-08-05 @lizhao1/memorax-code-internal @lizhao1/memorax-code-internal | osv | 2026-08-05 13:17 UTC | MAL-2026-12320 | link |
nolimit-agent-2026-08-05 nolimit-agent nolimit-agent | osv | 2026-08-05 09:36 UTC | MAL-2026-12183 | link |
a-poltoradnev-package-c-2026-08-05 a.poltoradnev-package-c a.poltoradnev-package-c | osv | 2026-08-05 09:35 UTC | MAL-2026-12127 | link |
alipclutch-baileys-2026-08-05 alipclutch-baileys alipclutch-baileys | osv | 2026-08-05 09:29 UTC | MAL-2026-12108 | link |
syft-acp-atoms-2026-08-05 syft-acp-atoms syft-acp-atoms | osv | 2026-08-05 09:21 UTC | MAL-2026-10764 | link |
eslint-plugin-awaitly-2026-08-05 eslint-plugin-awaitly eslint-plugin-awaitly | npm_deprecation | 2026-08-05 07:43 UTC | MAL-2026-5246 | link |
autotel-terminal-2026-08-05 autotel-terminal autotel-terminal | osv | 2026-08-05 07:22 UTC | MAL-2026-5186 | link |
ccfly-setup-darwin-arm64-2026-08-05 @ccfly/setup-darwin-arm64 @ccfly/setup-darwin-arm64 | osv | 2026-08-05 07:17 UTC | MAL-2026-12084 | link |
magda-semantic-indexer-sdk-2026-08-05 @magda/semantic-indexer-sdk @magda/semantic-indexer-sdk | osv | 2026-08-05 06:10 UTC | MAL-2025-47009 | link |
statist-browser-typed-client-nfs-grocery-mobile-events-2026-08-05 statist-browser-typed-client-nfs.grocery.mobile.events statist-browser-typed-client-nfs.grocery.mobile.events | agent | 2026-08-05 04:39 UTC | MAL-2026-12074 | link |
sso-tramvai-module-context-auth-2026-08-05 sso-tramvai-module-context-auth sso-tramvai-module-context-auth | agent | 2026-08-05 04:39 UTC | MAL-2026-12073 | link |
specials-obid-webpack-2026-08-05 specials-obid-webpack specials-obid-webpack | agent | 2026-08-05 04:39 UTC | MAL-2026-12072 | link |
shopping-shared-atom-mobile-cart-counter-2026-08-05 shopping-shared-atom-mobile-cart-counter shopping-shared-atom-mobile-cart-counter | agent | 2026-08-05 04:39 UTC | MAL-2026-12070 | link |
hubert-appointment-v2-task-create-am-2026-08-05 hubert-appointment-v2-task-create-am hubert-appointment-v2-task-create-am | agent | 2026-08-05 04:39 UTC | MAL-2026-12066 | link |
checkout-create-pos-order-am-2026-08-05 checkout-create-pos-order-am checkout-create-pos-order-am | agent | 2026-08-05 04:38 UTC | MAL-2026-12063 | link |
vitest-preview-pro-2026-08-05 vitest-preview-pro vitest-preview-pro | osv | 2026-08-05 03:30 UTC | MAL-2026-12004 | link |
sextant-cli-darwin-arm64-2026-08-05 sextant-cli-darwin-arm64 sextant-cli-darwin-arm64 | osv | 2026-08-05 03:30 UTC | MAL-2026-11997 | link |
qlik-tsconfig-2026-08-05 @qlik/tsconfig @qlik/tsconfig | osv | 2026-08-05 03:26 UTC | MAL-2026-11810 | link |
qlik-runtime-module-loader-2026-08-05 @qlik/runtime-module-loader @qlik/runtime-module-loader | osv | 2026-08-05 03:26 UTC | MAL-2026-11803 | link |
qlik-prettier-config-2026-08-05 @qlik/prettier-config @qlik/prettier-config | osv | 2026-08-05 03:26 UTC | MAL-2026-11801 | link |
qlik-eslint-config-vue-2026-08-05 @qlik/eslint-config-vue @qlik/eslint-config-vue | osv | 2026-08-05 03:26 UTC | MAL-2026-11797 | link |
qlik-eslint-config-svelte-2026-08-05 @qlik/eslint-config-svelte @qlik/eslint-config-svelte | osv | 2026-08-05 03:26 UTC | MAL-2026-11796 | link |
qlik-eslint-config-react-2026-08-05 @qlik/eslint-config-react @qlik/eslint-config-react | osv | 2026-08-05 03:26 UTC | MAL-2026-11795 | link |
qlik-eslint-config-2026-08-05 @qlik/eslint-config @qlik/eslint-config | osv | 2026-08-05 03:26 UTC | MAL-2026-11793 | link |
qlik-eslint-config-base-2026-08-05 @qlik/eslint-config-base @qlik/eslint-config-base | osv | 2026-08-05 03:26 UTC | MAL-2026-11794 | link |
qlik-embed-web-components-2026-08-05 @qlik/embed-web-components @qlik/embed-web-components | osv | 2026-08-05 03:26 UTC | MAL-2026-11792 | link |
qlik-embed-svelte-2026-08-05 @qlik/embed-svelte @qlik/embed-svelte | osv | 2026-08-05 03:26 UTC | MAL-2026-11791 | link |
methodology
How entries are defined
Registered is the earliest first_seen_at from supply_chain_compromised_versions: the point at which the API began returning compromised: true for those versions.
OSV is a citation to the linked advisory when Attestd has one. Most live entries are registered from the OSV ingestion pipeline. An OSV link means Attestd indexed that advisory; it is not a claim that Attestd published first.
Citation is the primary advisory URL, a press URL when recorded, or the OSV page.
Detection source discloses how the incident entered Attestd. osv is the OSV MAL pipeline. registry is curated registry YAML. npm_deprecation and pypi_yank are registry-native security signals. news_monitor and agent are corroborated news or agent promotions.
Commits are public on GitHub. Manual historical sync may use GPG signing when configured. Live auto-push uses the GitHub Git Data API so incident files and ledger.json update together. Verify history with git log in the repository.
related