Product
NPM Package Compromised Updates Check
- First Reported
- Jun 10, 2026
- Latest Reported
- Jun 10, 2026
Reported Context (1)
- Pull request checks like the NPM Package Compromised Updates Check already block your developers from pulling in versions of packages known to be compromised, right at the pull request. StepSecurity Adds API for Compromised Open-Source Components
Vendors (1)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.