supply chain · watching 13 services

Compromised packages, and who they reached.

Six answers per incident, each carrying the statement that produced it. Verdicts are computed, never inferred.

0

act now

4

services exposed

0

unscanned

open incidentssorted by act-now count

MAL-2025-46974L0 present onlymalwarecritical

Malicious code in debug (npm)

exposed 3while live 3act now 0unscanned 0published 2025-09-08 14:26:51Zcold 888 ms · warm 7.06 ms

MAL-2025-46969L0 present onlymalwarecritical

Malicious code in chalk (npm)

exposed 1while live 1act now 0unscanned 0published 2025-09-08 17:11:19Zcold 9.04 ms · warm 2.22 ms

GHSA-g7cv-rxg3-hmpxnone exposedmalwarecritical

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

exposed 0while live 0act now 0unscanned 0published 2026-05-12 00:12:49Zcold 81 ms · warm 76 ms

3 composed · reports generated 2026-08-16 14:29:04Z