{"id":"INC-npm-xfp75s9j3bp8","kind":"incident","aliases":[],"related":[],"title":"npm: Degraded Package Install and Publishing","description":"This incident has been resolved.","summary":null,"severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"npm","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["incident","npm","ops","registry","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-10-22T02:33:25+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","triaged_at":"2026-10-23T20:06:32+00:00","updated_at":"2026-10-23T20:06:32+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'degrad':2A 'inc':8A 'inc-npm-xfp75s9j3bp8':7A 'incid':12B,18C 'instal':4A 'npm':1A,9A,11A,13B 'op':14B 'packag':3A 'publish':6A 'registri':15B 'resolv':21C 'vendor':16B 'xfp75s9j3bp8':10A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T02:33:25+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"npm:xfp75s9j3bp8","url":"https://stspg.io/fr89w5qkp7j4","severity":"high","published_at":"2026-10-22T02:33:25+00:00","modified_at":"2026-10-22T04:24:18+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","fetched_at":"2026-10-25T18:54:10+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}