Sign in

v1

latestOpenAPI 3.0.02026-07-249055687.1 KB
deprecated

Get Threat Feed Items (Deprecated)

This endpoint is deprecated. Use the successor version instead.

Paginated list of threat feed items.

This endpoint requires an Enterprise Plan with Threat Feed add-on. Contact our sales team for more details.

This endpoint consumes 1 unit of your quota.

This endpoint requires the following org token scopes:

  • threat-feed:list
get/threat-feed

Query parameters

per_pageinteger

Number of threats per page

pagestring

Page token

sort'id' | 'created_at'

Sort sort the threat feed by ID or createdAt attribute.

discovery_period'1h' | '6h' | '1d' | '7d' | '30d' | '90d' | '365d'

Filter results by discovery period

direction'desc' | 'asc'

Ordering direction of the sort attribute

filter'u' | 'c' | 'fp' | 'tp' | 'mal' | 'vuln' | 'anom' | 'joke' | 'spy' | 'typo' | 'obf' | 'dual'

Filter by threat classification. Supported values: mal (malware, including possible malware), vuln (vulnerability), typo (typosquat, including possible typosquat), anom (anomaly), spy (telemetry), obf (obfuscated code), dual (dual-use tool), joke (protestware or joke package), tp (all confirmed true positives), fp (false positive), u (unreviewed), c (classified, i.e. anything except unreviewed).

namestring

Filter threats by package name

versionstring

Filter threats by package version

is_human_reviewedboolean

Only return threats which have been human-reviewed

ecosystem'github' | 'cargo' | 'clawhub' | 'composer' | 'chrome' | 'golang' | 'huggingface' | 'maven' | 'npm' | 'nuget' | 'vscode' | 'pypi' | 'gem' | 'swift'

Filter threats by package ecosystem.

Response

The paginated list of threats in the feed and the next page querystring token.

nextPagestring nullable required