Threat Intelligence
Data Hub
A human-curated feed of indicators, campaigns, and malicious packages. Structured, evidence-backed, and free to browse. For real-time verdicts, see the Threat Intelligence Feed.
- Indicators
- 1053
- Malicious Packages
- 1257
- Campaigns
- 37
- TTPs
- 149
Threat Intel Feed API
Send SafeDep verdicts to your SIEM and CI
You get each confirmed malicious package with its campaign and IOCs. Query it over JSON, or push it to Splunk, Zscaler or Artifactory.
Browse by
Indicators of Compromise
Domains, IPs, emails, hashes, wallets. Filter, copy, export.
1053 indicators
Campaigns
Named operations tying packages, IOCs and TTPs together.
37 campaigns
Malicious Packages
By ecosystem and version. "Is this dep bad?" lookups.
1257 packages
TTPs
Attack patterns mapped to MITRE ATT&CK techniques.
149 TTPs
Recent activity
RSS- indicatortechnext/100-template-list
- indicatoraboozaid/react-native-facerecognition
- indicatorefstathiosntonas/react-native-style-libraries-benchmark
- indicatorSFARPak/AliFullStack
- indicatoraliezzahn/event-timeline-roadmap
- indicatorgumlau/nextjs-seo-blog-starter
- indicatorflecs-hub/flecs-polyglot
- indicatorTheSentora/Crypto-Web3-Copilot-App
- indicatorsubramanianv/CertificateVerification
- indicatormorganjweaver/liquibet
- indicatorDhruvone8/iChat
- indicatorWeb3-Builders-Alliance/convergence
