The incidents behind a package’s reputation. Read what happened, which releases were affected, and what the original investigators found.
Reviewed reports · last reviewed 2026-09-05. This is a selected incident record, not an exhaustive live threat feed. A past compromise does not establish that the current release is compromised.
· crates.io
Wiz reported that hijacked releases added a malicious dependency that ran during compilation. Rust responders removed those releases. Wiz also identified infrastructure shared with previously reported DPRK-linked campaigns.
Affected versions: arrayref 0.3.10; internment 0.8.7; append-only-vec 0.1.9
Packages: arrayref · internment · append-only-vec
Source: Wiz Research
· npm
Wiz documented malicious releases following a maintainer account compromise. The payload targeted developer and cloud credentials and attempted to spread through package publishing.
Affected versions: keyv 6.0.0; cacheable-request 13.0.20; cache-manager 7.2.10
Packages: keyv · cacheable-request · cache-manager
Source: Wiz Research
· npm
StepSecurity traced two malicious Axios releases to compromised publishing credentials. A newly added dependency delivered the payload; the affected releases were subsequently removed from npm.
Affected versions: 1.14.1 and 0.30.4
Packages: axios
Source: StepSecurity
· PyPI
JFrog documented backdoored PyPI releases after a compromised Trivy build tool exposed publishing credentials. The report describes credential theft and the project’s change to a pinned Trivy version.
Affected versions: 1.82.7 and 1.82.8
Packages: litellm
Source: JFrog Security Research
· npm
Aikido reported compromised releases across a widely used group of npm packages. The injected browser code attempted to redirect cryptocurrency transactions to attacker-controlled destinations.
Affected versions: Affected releases differ by package; see the original report.
Packages: chalk · debug · ansi-styles · supports-color · strip-ansi · ansi-regex · color-convert · color-name · wrap-ansi · slice-ansi · is-arrayish · error-ex · color-string · simple-swizzle · has-ansi · supports-hyperlinks · chalk-template · backslash
Source: Aikido Security
· npm
Nx described how a GitHub Actions injection exposed a publishing token and enabled malicious releases that collected sensitive files. Its response included trusted publishing and manual release approval.
Affected versions: See Nx’s linked advisory for the package-specific affected versions.
Packages: nx
Source: Nx maintainers
Astra’s top-ten article ↗ collects historical CVEs from 2020–2022. It is not a live ranking or the OWASP Top 10. The mapping below explains which entries relate to package identities we check.
An identity match is a reason to investigate, not confirmation that your installed release is vulnerable. Manifest checks do not establish runtime configuration or resolve every transitive dependency.
| Vulnerability | Product / package relationship |
|---|---|
| ZeroLogon CVE-2020-1472 ↗ | Windows / Netlogon Host and domain-controller assessment required. Outside package-only scan coverage |
| Log4Shell CVE-2021-44228 ↗ | Apache Log4j Core Applies to specific log4j-core releases, not log4j-api alone. Check resolved and bundled dependencies against Apache’s affected-version ranges. org.apache.logging.log4j:log4j-core |
| ICMAD CVE-2022-22536 ↗ | SAP NetWeaver / related SAP services Requires SAP product and deployment inventory. Outside package-only scan coverage |
| ProxyLogon CVE-2021-26855 ↗ | Microsoft Exchange Server Check the Exchange deployment; a NuGet package name cannot establish exposure. Outside package-only scan coverage |
| Spring4Shell CVE-2022-22965 ↗ | Spring Framework Historical affected branches include 5.3.0–5.3.17 and 5.2.19 and earlier. Exploitability depends on runtime and deployment; consult Spring’s advisory. org.springframework:spring-webmvc · org.springframework:spring-webflux · org.springframework:spring-beans |
| Confluence RCE CVE-2022-26134 ↗ | Atlassian Confluence Requires Confluence Server or Data Center version inventory. Outside package-only scan coverage |
| vCenter RCE CVE-2021-21972 ↗ | VMware vCenter Server Requires infrastructure product and version inventory. Outside package-only scan coverage |
| Chrome use-after-free CVE-2022-0609 ↗ | Google Chrome Check the installed browser; JavaScript package names do not identify its version. Outside package-only scan coverage |
| Follina CVE-2022-30190 ↗ | Windows MSDT Requires Windows patch and configuration assessment. Outside package-only scan coverage |
| PetitPotam CVE-2021-36942 ↗ | Windows LSA / EFSRPC Requires Windows and domain configuration assessment. Outside package-only scan coverage |
Browse CVEs by vendor and product. Runtime CVEs do not automatically apply to every package in that ecosystem; verify affected versions and configurations.
Follow these publishers and official advisories for broader coverage. RSS links open their feeds; articles are not automatically imported into the reviewed reports above. Feedspot is a directory for discovering feeds.
Vulnerability database
Container security advisories
Security research
Security publisher
Security publisher
Security publisher
Security publisher
Government advisories
Government advisories
Vendor advisories
Feed directory
