🧰 NPM Package Compromised Updates Check

The items that name it 6

• jscrambler npm package publishes malicious preinstall binary
  writeup2026-07-12

  Maintains a real-time database of known malicious/high-risk npm packages and blocks PRs that introduce a compromised package

• Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised
  writeup2026-07-01

  Maintains a real-time database of known malicious and high-risk npm packages, updated continuously, often before official CVEs are filed; fails PR checks and blocks merges introducing compromised packages.

• Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat
  writeup2026-06-18

  Maintains a real-time database of known malicious/high-risk npm packages and fails PRs that attempt to introduce a compromised package

• New in the Threat Center: Compromised Components, Now Available via API
  article2026-06-09

  Pull request check that blocks developers from pulling in versions of packages known to be compromised

• StepSecurity + Endor Labs: Mini-Shai-Hulud Wave 2
  writeup2026-05-19

  Maintains a real-time database of known malicious/high-risk npm packages and blocks PRs that attempt to introduce a compromised package.

• Active Supply Chain Attack: Malicious node-ipc Versions Published to npm
  writeup

  Maintains a real-time database of known malicious/high-risk npm packages and blocks PRs/merges that attempt to introduce them