Detection Ledger

Hide demo and sandbox entries

Full commit history and JSON artifacts: github.com/attestd-io/detection-ledger

Incidents committed to the ledger within 24 hours of registration. GitHub commit time matches detection time for these entries.

Showing 100 of 3097. Show all in this section · Full ledger.json

Incidents registered before the ledger repository existed, or without a matching near-real-time commit. The registered timestamp reflects internal database records where available.

Showing 100 of 165. Show all in this section · Full ledger.json

How entries are defined

Registered is the earliest first_seen_at from supply_chain_compromised_versions: the point at which the API began returning compromised: true for those versions.

OSV is a citation to the linked advisory when Attestd has one. Most live entries are registered from the OSV ingestion pipeline. An OSV link means Attestd indexed that advisory; it is not a claim that Attestd published first.

Citation is the primary advisory URL, a press URL when recorded, or the OSV page.

Detection source discloses how the incident entered Attestd. osv is the OSV MAL pipeline. registry is curated registry YAML. npm_deprecation and pypi_yank are registry-native security signals. news_monitor and agent are corroborated news or agent promotions.

Commits are public on GitHub. Manual historical sync may use GPG signing when configured. Live auto-push uses the GitHub Git Data API so incident files and ledger.json update together. Verify history with git log in the repository.