Skip to content

Search packages

Check Advisories Set up CI Trust GitHub

Advisories

npm package versions that were hijacked, confirmed by independent witnesses. Newest first.

Search advisories

Show withdrawnSeveritySince

Connecting Live activity

Waiting for new advisories, confirmations and withdrawals…

‹ All advisories

Block hijacked packages in CI

uses: andrew1234-arch/mene@v1

Full setup in under 2 minutes →

Product

Check a project
Advisories
Packages
Set up CI

Trust

How Mene earns trust
Witnesses

Project

Docs (README)
License (MIT)
GitHub
CLI on npm

Data lives on Arkiv

Connecting…

Advisories are stored on Arkiv and read straight from your browser; there is no Mene server. Package names are trademarks of their owners and appear here only to identify affected software.