🧰 npm Package Search

The items that name it 5

• jscrambler npm package publishes malicious preinstall binary
  writeup2026-07-12

  Searches across all PRs and repositories in an organization to find where a specific package was introduced and assess blast radius

• Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised
  writeup2026-07-01

  Searches across all PRs in all repositories across an organization to find where a specific package was introduced, enabling blast-radius assessment (repos, PRs, teams affected).

• Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
  writeup2026-06-18

  Searches across all PRs and repositories in an organization to find where a specific (e.g. compromised) package was introduced, showing blast radius across repos, PRs, and teams

• StepSecurity + Endor Labs: Mini-Shai-Hulud Wave 2
  writeup2026-05-19

  Searches across all PRs and repositories in an organization to find where a specific package was introduced, revealing blast radius across repos, PRs, and teams.

• Active Supply Chain Attack: Malicious node-ipc Versions Published to npm
  writeup

  Searches across all PRs and repositories in an organization to find where a specific package was introduced, to assess blast radius across repos, PRs, teams, and dev machines