Product
pgserve
- First Reported
- Apr 21, 2026
- Latest Reported
- Apr 21, 2026
Reported Context (1)
- On April 21, 2026, malicious versions of pgserve were published to npm. pgserve is an embedded PostgreSQL server for development — zero config, auto-provisioned databases, designed to be dropped into any Node.js Malicious pgserve npm Releases Harvest Credentials and Spread to Other Packages
MITRE ATT&CK (10)
Vendors (1)
Products (2)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.