Observed arrival · 2026-11-06
Compromised.live: a live feed of exploited software
A free, filterable feed of exploited vulnerabilities and malicious packages, with dependency checking and links to RSS, JSON, API, and MCP access.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Developers checking software dependencies
- Worth noticing
- Filters cover threat type and ecosystem, including npm, PyPI, Go, and GitHub Actions.
Field notes
Readers can narrow entries by 24-hour, 7-day, or 30-day windows; signal level; threat type; and ecosystem, including npm, PyPI, Go, and GitHub Actions. Individual advisories identify affected package versions and cite sources such as OSV. Some entries provide containment steps—for example, treating an infected machine as compromised and rotating credentials from another device before rebuilding.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue