Product
npm Package Cooldown
- First Reported
- Mar 5, 2026
- Latest Reported
- Apr 15, 2026
Reported Context (2)
- If you are already familiar with StepSecurity's npm Package Cooldown check, which blocks PRs that introduce recently published packages, think of this as the other half of the cooldown story. The npm Package Cooldown StepSecurity Adds Dependabot Grouping and Cooldown Controls
- NPM Package Cooldown is a GitHub Check that automatically blocks any pull request that introduces a dependency published within a configurable waiting period (default: 2 days). If a PR tries to add a package that was Datadog’s 2026 DevSecOps Report Highlights CI/CD and Supply-Chain Risks
Malware (1)
People (1)
Threat Actors (2)
Vendors (4)
Products (14)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.