SOsocket-dev
deprecated

Get Threat Feed Items (Deprecated)

Changed on

This endpoint is deprecated. Use the successor version instead.

Paginated list of threat feed items.

This endpoint requires an Enterprise Plan with Threat Feed add-on. Contact our sales team for more details.

This endpoint consumes 1 unit of your quota.

This endpoint requires the following org token scopes:

  • threat-feed:list
get/threat-feed

Request

  • Base URL
    https://api.socket.dev/v0
  • URL
    https://api.socket.dev/v0/threat-feed
  • Auth
    • HTTP bearer
    • or HTTP basic

Query parameters

per_pageinteger

Number of threats per page

pagestring

Page token

sort'id' | 'created_at'

Sort sort the threat feed by ID or createdAt attribute.

discovery_period'1h' | '6h' | '1d' | '7d' | '30d' | '90d' | '365d'

Filter results by discovery period

direction'desc' | 'asc'

Ordering direction of the sort attribute

filter'u' | 'c' | 'fp' | 'tp' | 'mal' | 'vuln' | 'anom' | 'joke' | 'spy' | 'typo' | 'obf' | 'dual'

Filter by threat classification. Supported values: mal (malware, including possible malware), vuln (vulnerability), typo (typosquat, including possible typosquat), anom (anomaly), spy (telemetry), obf (obfuscated code), dual (dual-use tool), joke (protestware or joke package), tp (all confirmed true positives), fp (false positive), u (unreviewed), c (classified, i.e. anything except unreviewed).

namestring

Filter threats by package name

versionstring

Filter threats by package version

is_human_reviewedboolean

Only return threats which have been human-reviewed

ecosystem'github' | 'cargo' | 'composer' | 'chrome' | 'firefox-extension' | 'edge-extension' | 'golang' | 'huggingface' | 'maven' | 'npm' | 'nuget' | 'vscode' | 'vscode-extension' | 'pypi' | 'gem' | 'swift'

Filter threats by package ecosystem.

Response

The paginated list of threats in the feed and the next page querystring token.

nextPagestring nullable required

Changes

  • 5ad8bf36b1e7Revision changes
    • breaking

      removed the enum value clawhub from the query request parameter ecosystem

    • info

      added the new enum value edge-extension to the query request parameter ecosystem

    • info

      added the new enum value firefox-extension to the query request parameter ecosystem

    • info

      added the new enum value vscode-extension to the query request parameter ecosystem