Introducing SafeDep Threat Intel

SafeDep Threat Intel is now available as an add-on to any paid plan.

It gives SOC and cyber defense teams the malicious package intelligence behind SafeDep’s platform. They can query it, or push it into the tools they already run to protect against supply chain attacks in their network.

Check out the 📑 Documentation⁠(opens in new tab)

What’s in it?

Malicious package feed API. A continuous stream of suspicious and confirmed malicious packages, campaigns, and indicators of compromise (IoCs) across npm, PyPI, Go, Maven, and more.

export SAFEDEP_API_KEY="<your-api-key>"
export SAFEDEP_TENANT_ID="your-company.safedep.io"
export TI="https://api.safedep.io/safedep.services.threatintel.v1.ThreatIntelService"

curl -sS "$TI/ListPackageReports" \
  -H "Content-Type: application/json" \
  -H "Authorization: $SAFEDEP_API_KEY" \
  -H "X-Tenant-ID: $SAFEDEP_TENANT_ID" \
  -d '{"pagination":{"pageSize":5,"sortOrder":"SORT_ORDER_DESCENDING"}}'

SafeDep Threat Intel Dashboard. A curated place for all verdicts, reasoning, and campaigns in the SafeDep console⁠(opens in new tab).

🚀 Quickstart⁠(opens in new tab) with SafeDep Threat Intel

Support

Contact us via email, Discord and other channels⁠(opens in new tab).