# Chainguard: Resolved: Delayed package scan results

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2026-08-10 23:46 UTC · Resolved: 2026-08-11 23:46 UTC · Duration: 24 h
- Updates: 6 · Affected components: JavaScript Libraries
- Vendor status page: n/a
- [Company: Chainguard](https://rewindex.com/company/chainguard.md)

## Timeline of updates

- **degraded** 2026-08-10 23:46 UTC: We've identified an issue affecting the timing of malware scan completion for some upstream packages, which may cause download errors (MALWARE\_SCAN\_PENDING) for a subset of packages. We've found no evidence that any customer has downloaded a package later confirmed to be malicious. We've increased scanning capacity and deployed a fix to staging, and are working to fully resolve the backlog. We'll post updates as we have them.
- **degraded** 2026-08-11 02:52 UTC: We have deployed fixes for the underlying issue, and remaining impact is limited to a backlog of pending malware scans. Until a package's scan completes, requests for it may fail or return MALWARE\_SCAN\_PENDING. We expect this process to take approximately 3 more hours. Separately, a small number of packages were incorrectly flagged and blocked by malware scanning, i.e., false positives. We are reviewing and unblocking these; if a specific package remains blocked or unavailable for you, please open a support ticket.
- **degraded** 2026-08-11 06:03 UTC: 95% of malware scan has completed. Until a package's scan completes, requests for it may fail or return MALWARE\_SCAN\_PENDING. We expect this process to take approximately 3 more hours.
- **degraded** 2026-08-11 08:59 UTC: Malware scan is ongoing currently. Until a package's scan completes, requests for it may fail or return MALWARESCANPENDING. We expect this process to take around few more hours. We'll keep this page updated.
- **degraded** 2026-08-11 14:17 UTC: The malware scan backlog continues to drain and is in its final stage. The vast majority of packages have completed scanning and are available as expected. A small number of remaining packages are being re-processed and we expect them to clear shortly. We will continue to provide updates as the work progresses.
- **resolved** 2026-08-11 23:46 UTC: The malware scan backlog has been fully processed. All packages have completed their initial scans and are now available as expected. If you are experiencing issues with a specific package, please reach out to our support team. Thank you for your patience while we completed this work.


---
Canonical: https://rewindex.com/company/chainguard/incidents/1007862 · Markdown: https://rewindex.com/company/chainguard/incidents/1007862.md · JSON: https://rewindex.com/api/v1/companies/chainguard/incidents/1007862 · Generated 2026-10-20T01:31:04.419Z