---
title: "Get a threat campaign"
method: GET
path: "/v1/orgs/{org_slug}/threat-campaigns/{campaign_id}/"
tags: ["threat-campaigns"]
---

# Get a threat campaign

`GET /v1/orgs/{org_slug}/threat-campaigns/{campaign_id}/`

## Request

- The document declares no server URL.
- Auth: HTTP bearer

Returns a single supply chain attack campaign by ID. Same shape as one item
from the campaigns list; package PURLs are not inlined — fetch them from the
paginated `/threat-campaigns/:campaign_id/packages` resource instead.

Useful for filling in cached campaign metadata client-side when crawling the
campaigns list or packages feed.

Authentication: Organization API token, OAuth2, or NextAuth session.
Required token scope: `threat-campaigns:list`.

This endpoint requires an Enterprise Plan with the Threat Feed add-on.

## Path parameters

- `org_slug` string, required
- `campaign_id` string, required

## Response `200`

Default Response

- object
  - `id` string, required
  - `name` string, required
  - `description` string, required
  - `status` 'ongoing' | 'past', required
  - `ecosystem` string[], nullable, required
  - `firstDiscovered` string, nullable, required
  - `lastActivity` string, nullable, required
  - `blogUrls` string[], required
  - `linkedThreatCount` integer, required: Number of threat feed entries linked to this campaign.
  - `linkedPackageArtifactsCount` integer, required: Number of distinct package artifacts linked to this campaign.
  - `htmlUrl` string, nullable, required: URL of the public campaign page on socket.dev, or null if the campaign has no public page.
  - `createdAt` string, date-time, required
  - `updatedAt` string, date-time, required

## Other responses

- `400`: Default Response
- `401`: Default Response
- `403`: Default Response
- `404`: Default Response
- `429`: Default Response

---

[API](https://skmtc.dev/socket-dev/apis/socket-api-v1.md) - [All operations](https://skmtc.dev/socket-dev/apis/socket-api-v1/llms.txt) - [OpenAPI document](https://skmtc.dev/socket-dev/apis/socket-api-v1/revisions/e88284728ffb?raw)