Live Wave Icon New Blog: Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised
•
Edit Calendar Icon 19 May 2026
SafeDep Logo
Pricing
Discover & Monitor
SCA & SBOM
SCA & SBOM

Scan dependencies, generate SBOMs, enforce policy.

AI Agent Discovery
AI Agent Discovery

See every AI tool and SDK in your org.

AI Agent Monitoring
AI Agent Monitoring

Audit every action your AI agents take.

Protect
Developer Security
Developer Security

Block malicious packages at install-time.

CI/CD Security
CI/CD Security

Block malicious packages in your pipeline.

MCP Server
MCP Server

Block threats inside your AI coding agent.

Agent API
Agent API

Threat intelligence API for custom agents.

Threat Intelligence
Threat Intelligence

Real-time malicious package verdicts.

Govern
Platform
Platform

Centralized policies, dashboard, compliance.

Vet
Vet

Scan and govern your dependencies across every PR and build.

PMG
PMG

Block malicious packages at install-time, before they enter your codebase.

xbom
xbom

Generate AI-enriched BOMs using real code evidence, not just manifests.

GRYPH
GRYPH

Monitor every AI coding agent action across your projects and workflows.

How it works Blog
Documentation
SDK
API
Threat Intelligence Hub
Login Book a Demo GitHub 1.5k Discord
safedep.io / ti
SAFEDEP THREAT INTELLIGENCE

Threat Intelligence Data Hub

A human-curated feed of indicators, campaigns, and malicious packages, compiled from SafeDep security research. Structured, evidence-backed, and free to browse, copy, and export. No login required.

Need real-time, machine-speed verdicts across every ecosystem? See the Threat Intelligence Feed or book a demo.

↓ JSON ↓ CSV ⦿ RSS feed
312
Indicators
668
Malicious packages
17
Campaigns
21
TTPs
BROWSE BY
Indicators of Compromise →

Domains, IPs, emails, hashes, wallets. Filter, copy, export.

312 indicators
Campaigns →

Named operations tying packages, IOCs and TTPs together.

17 campaigns
Malicious Packages →

By ecosystem and version. "Is this dep bad?" lookups.

668 packages
TTPs →

Attack patterns mapped to MITRE ATT&CK techniques.

21 TTPs
RECENT ACTIVITY
view feed →
2026-05-21 package npm/polymarket-trading-cli 2026-05-21 package npm/polymarket-terminal 2026-05-21 package npm/polymarket-trade 2026-05-21 package npm/polymarket-auto-trade 2026-05-21 package npm/polymarket-copy-trading 2026-05-21 package npm/polymarket-bot 2026-05-21 package npm/polymarket-claude-code 2026-05-21 package npm/polymarket-ai-agent 2026-05-21 package npm/polymarket-trader 2026-05-21 indicator polymarketbot.polymarketdev.workers.dev 2026-05-21 indicator e01b85c1437085a519217338fe4ee5ed7858c28a10f8c1477b2f1857c3386edb 2026-05-21 indicator [email protected]
SafeDep Logo
SafeDep
Terms · Privacy Policy
SOC 2 Type II Certified
ISO 27001:2013 Certified
SOC 2 Type II Certified
ISO 27001:2013 Certified
SOC 2 Type II Certified
ISO 27001:2013 Certified
Product
  • Features
  • Pricing
  • How it works
Solutions
  • AI Agent Discovery
  • AI Agent Monitoring
  • Threat Intel for Agents
  • Threat Intel for SecOps
  • MCP Server
  • Threat Intel Data Hub
  • Developer API
  • Partners
Support
  • Docs
  • Community Forum
  • FAQ
  • Professional Services
  • Status
Company
  • About
  • Blog
  • Contact
  • Careers
  • GitHub
© 2026 SafeDep, Inc. All rights reserved