Product
Package Cooldown
- First Reported
- May 12, 2026
- Latest Reported
- May 12, 2026
Reported Context (1)
- complements, rather than replaces, StepSecurity's existing GitHub Checks controls, specifically Package Cooldown and Package Compromised Updates, which scan pull requests for the same risks. The two enforce at StepSecurity Launches Secure Registry for Install-Time npm Supply-Chain Controls
Malware (2)
Threat Actors (1)
Vendors (1)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.