Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
PackageGate
Vulnerability
Threat entity extracted from intelligence sources
Entities
›
vulnerability
›
PackageGate
Frequency
2
occurrences
First Seen
January 27, 2026
Last Seen
January 28, 2026
API
Overview
Recent Events
Profile
Profile
1 / 1
Associated Malware
Shai-hulud
Tools Used
Npm
Bun
Git
Affected Platforms
Pnpm
Vlt
GitHub
Yarn
Related Clusters (1)
PackageGate Vulnerabilities Affect Major JavaScript Package Managers
Jan 28
·
2 sources
32
Related Articles (2)
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
Securityaffairs.Co
·
Jan 28
Unplugged holes in the npm and yarn package managers could let attackers bypass defenses against Shai
Csoonline
·
Jan 27
Related Entities
Supply Chain Attack
Worm
Koi
Shai-hulud
Pnpm
Vlt
GitHub
Yarn
Npm
Bun
Git