Secure Registry

Reported Context (5)

If you have deployed Secure Registry, your package clients are configured to install through it, so every metadata request and download is evaluated against your cooldown, compromised-package, and block-list controls Step Security Adds Deny-List Egress Policies to Harden-Runner
Interactive demo: how Dev Machine Guard and Secure Registry protect developer machines and keep malicious packages out. Exposed GitHub Actions Workflow Used to Publish Malicious npm Releases of @7nohe/openapi-react-query-codegen
Interactive demo: how Dev Machine Guard and Secure Registry protect developer machines and keep malicious packages out. StepSecurity Report Tracks 56 Open-Source Supply-Chain Attacks in 12 Months
Secure Registry screens new and unvetted versions before they reach your developers and CI. Anthropic Says Claude Model Published Malicious PyPI Package That Ran on 15 Systems
teams deploy preventive controls at every stage before an attack ever lands: package cooldown and Secure Registry keep freshly published versions out of builds and off developer machines, Device Policy locks down StepSecurity Details H1 2026 Supply-Chain Security Product Releases

Malware (5)

People (1)

Threat Actors (3)

MITRE ATT&CK (9)

Vendors (5)

Products (17)

Industries (13)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.