# Shai-Hulud Supply Chain Attack - Compromised Packages List
#
# This file contains 5,924 confirmed compromised package versions from
# multiple supply chain attacks between September 2025 and October 2026.
# The campaigns were self-replicating, so new compromised packages may still be discovered.
#
# Sources: StepSecurity, Wiz.io, Semgrep, JFrog security advisories and Socket.dev
# Format: <ecosystem>:package_name:version, OR bare package_name:version (defaults to npm)
#         Bare entries (e.g. "axios:1.14.1") are interpreted as npm for backward compatibility.
#         Explicit npm entries use the "npm:" prefix; PyPI entries use "pypi:";
#         Composer/PHP entries use "composer:vendor/package:version"; Crates/Rust
#         entries use "crates:name:version".
#         NOTE: campaigns where ALL versions of a package are malicious (TrapDoor,
#         Laravel-Lang) are detected version-agnostically by their dedicated
#         check_* functions in shai-hulud-detector.sh, not by per-version entries here.
# Last updated: November 2026
#
# MAINTAINING THIS LIST:
# - Add new compromised packages as they are discovered
# - Check security advisories regularly for updates:
#   * https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised
#   * https://semgrep.dev/blog/2025/security-advisory-npm-packages-using-secret-scanning-tools-to-steal-credentials/
#   * https://jfrog.com/blog/shai-hulud-npm-supply-chain-attack-new-compromised-packages-detected/
#   * https://www.wiz.io/blog/shai-hulud-npm-supply-chain-attack
#   * https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages
#   * https://socket.dev/blog/sandworm-mode-npm-worm-ai-toolchain-poisoning
# - Format: one package:version per line
# - Lines starting with # are comments and will be ignored
#
# Only Remove packages once you have verified they should not be on this list

# ========================================================================
# SEPTEMBER 8, 2025 - CHALK/DEBUG CRYPTO THEFT ATTACK (18+ packages)
# Cryptocurrency wallet address replacement malware targeting browser users
# Attack duration: ~2 hours on September 8, 2025
# ========================================================================

# Popular packages with 2+ billion weekly downloads affected
02-echo:0.0.7
@accordproject/concerto-analysis:3.24.1
@accordproject/concerto-linter-default-ruleset:3.24.1
@accordproject/concerto-linter:3.24.1
@accordproject/concerto-metamodel:3.12.5
@accordproject/concerto-types:3.24.1
@accordproject/markdown-it-cicero:0.16.26
@accordproject/template-engine:2.7.2
@actbase/css-to-react-native-transform:1.0.3
@actbase/native:0.1.32
@actbase/node-server:1.1.19
@actbase/react-absolute:0.8.3
@actbase/react-daum-postcode:1.0.5
@actbase/react-kakaosdk:0.9.27
@actbase/react-native-actionsheet:1.0.3
@actbase/react-native-devtools:0.1.3
@actbase/react-native-fast-image:8.5.13
@actbase/react-native-kakao-channel:1.0.2
@actbase/react-native-kakao-navi:2.0.4
@actbase/react-native-less-transformer:1.0.6
@actbase/react-native-naver-login:1.0.1
@actbase/react-native-simple-video:1.0.13
@actbase/react-native-tiktok:1.1.3
@afetcan/api:0.0.13
@afetcan/storage:0.0.27
@ahmedhfarag/ngx-perfect-scrollbar:20.0.20
@ahmedhfarag/ngx-virtual-scroller:4.0.4
@alaan/s2s-auth:2.0.3
@alexadark/amadeus-api:1.0.4
@alexadark/gatsby-theme-events:1.0.1
@alexadark/gatsby-theme-wordpress-blog:2.0.1
@alexadark/reusable-functions:1.5.1
@alexcolls/nuxt-socket.io:0.0.7
@alexcolls/nuxt-socket.io:0.0.8
@alexcolls/nuxt-ux:0.6.1
@alexcolls/nuxt-ux:0.6.2
@antstackio/eslint-config-antstack:0.0.3
@antstackio/express-graphql-proxy:0.2.8
@antstackio/graphql-body-parser:0.1.1
@antstackio/json-to-graphql:1.0.3
@antstackio/shelbysam:1.1.7
@art-ws/common:2.0.22
@art-ws/common:2.0.28
@art-ws/config-eslint:2.0.4
@art-ws/config-eslint:2.0.5
@art-ws/config-ts:2.0.7
@art-ws/config-ts:2.0.8
@art-ws/db-context:2.0.21
@art-ws/db-context:2.0.24
@art-ws/di-node:2.0.13
@art-ws/di:2.0.28
@art-ws/di:2.0.32
@art-ws/eslint:1.0.5
@art-ws/eslint:1.0.6
@art-ws/fastify-http-server:2.0.24
@art-ws/fastify-http-server:2.0.27
@art-ws/http-server:2.0.21
@art-ws/http-server:2.0.25
@art-ws/openapi:0.1.12
@art-ws/openapi:0.1.9
@art-ws/package-base:1.0.5
@art-ws/package-base:1.0.6
@art-ws/prettier:1.0.5
@art-ws/prettier:1.0.6
@art-ws/slf:2.0.15
@art-ws/slf:2.0.22
@art-ws/ssl-info:1.0.10
@art-ws/ssl-info:1.0.9
@art-ws/web-app:1.0.3
@art-ws/web-app:1.0.4
@aryanhussain/my-angular-lib:0.0.23
@asyncapi/avro-schema-parser:3.0.25
@asyncapi/avro-schema-parser:3.0.26
@asyncapi/bundler:0.6.5
@asyncapi/bundler:0.6.6
@asyncapi/cli:4.1.2
@asyncapi/cli:4.1.3
@asyncapi/converter:1.6.3
@asyncapi/converter:1.6.4
@asyncapi/diff:0.5.1
@asyncapi/diff:0.5.2
@asyncapi/dotnet-rabbitmq-template:1.0.1
@asyncapi/dotnet-rabbitmq-template:1.0.2
@asyncapi/edavisualiser:1.2.1
@asyncapi/edavisualiser:1.2.2
@asyncapi/generator-components:0.3.2
@asyncapi/generator-components:0.3.3
@asyncapi/generator-helpers:0.2.1
@asyncapi/generator-helpers:0.2.2
@asyncapi/generator-react-sdk:1.1.4
@asyncapi/generator-react-sdk:1.1.5
@asyncapi/generator:2.8.5
@asyncapi/generator:2.8.6
@asyncapi/go-watermill-template:0.2.76
@asyncapi/go-watermill-template:0.2.77
@asyncapi/html-template:3.3.2
@asyncapi/html-template:3.3.3
@asyncapi/java-spring-cloud-stream-template:0.13.5
@asyncapi/java-spring-cloud-stream-template:0.13.6
@asyncapi/java-spring-template:1.6.1
@asyncapi/java-spring-template:1.6.2
@asyncapi/java-template:0.3.5
@asyncapi/java-template:0.3.6
@asyncapi/keeper:0.0.2
@asyncapi/keeper:0.0.3
@asyncapi/markdown-template:1.6.8
@asyncapi/markdown-template:1.6.9
@asyncapi/modelina-cli:5.10.2
@asyncapi/modelina-cli:5.10.3
@asyncapi/modelina:5.10.2
@asyncapi/modelina:5.10.3
@asyncapi/multi-parser:2.2.1
@asyncapi/multi-parser:2.2.2
@asyncapi/nodejs-template:3.0.5
@asyncapi/nodejs-template:3.0.6
@asyncapi/nodejs-ws-template:0.10.1
@asyncapi/nodejs-ws-template:0.10.2
@asyncapi/nunjucks-filters:2.1.1
@asyncapi/nunjucks-filters:2.1.2
@asyncapi/openapi-schema-parser:3.0.25
@asyncapi/openapi-schema-parser:3.0.26
@asyncapi/optimizer:1.0.5
@asyncapi/optimizer:1.0.6
@asyncapi/parser:3.4.1
@asyncapi/parser:3.4.2
@asyncapi/php-template:0.1.1
@asyncapi/php-template:0.1.2
@asyncapi/problem:1.0.1
@asyncapi/problem:1.0.2
@asyncapi/protobuf-schema-parser:3.5.2
@asyncapi/protobuf-schema-parser:3.5.3
@asyncapi/protobuf-schema-parser:3.6.1
@asyncapi/python-paho-template:0.2.14
@asyncapi/python-paho-template:0.2.15
@asyncapi/react-component:2.6.6
@asyncapi/react-component:2.6.7
@asyncapi/server-api:0.16.24
@asyncapi/server-api:0.16.25
@asyncapi/specs:6.10.1
@asyncapi/specs:6.8.2
@asyncapi/specs:6.8.3
@asyncapi/specs:6.9.1
@asyncapi/studio:1.0.2
@asyncapi/studio:1.0.3
@asyncapi/web-component:2.6.6
@asyncapi/web-component:2.6.7
@basic-ui-components-stc/basic-ui-components:1.0.5
@bdkinc/knex-ibmi:0.5.7
@browserbasehq/bb9:1.2.21
@browserbasehq/director-ai:1.0.3
@browserbasehq/mcp-server-browserbase:2.4.2
@browserbasehq/mcp:2.1.1
@browserbasehq/sdk-functions:0.0.4
@browserbasehq/stagehand-docs:1.0.1
@browserbasehq/stagehand:3.0.4
@caretive/caret-cli:0.0.2
@chtijs/eslint-config:1.0.1
@clausehq/flows-step-httprequest:0.1.14
@clausehq/flows-step-jsontoxml:0.1.14
@clausehq/flows-step-mqtt:0.1.14
@clausehq/flows-step-sendgridemail:0.1.14
@clausehq/flows-step-taskscreateurl:0.1.14
@cllbk/ghl:1.3.1
@commute/bloom:1.0.3
@commute/market-data-chartjs:2.3.1
@commute/market-data:1.0.2
@coveops/abi:2.0.1
@crowdstrike/commitlint:8.1.1
@crowdstrike/commitlint:8.1.2
@crowdstrike/falcon-shoelace:0.4.1
@crowdstrike/falcon-shoelace:0.4.2
@crowdstrike/foundry-js:0.19.1
@crowdstrike/foundry-js:0.19.2
@crowdstrike/glide-core:0.34.2
@crowdstrike/glide-core:0.34.3
@crowdstrike/logscale-dashboard:1.205.1
@crowdstrike/logscale-dashboard:1.205.2
@crowdstrike/logscale-file-editor:1.205.1
@crowdstrike/logscale-file-editor:1.205.2
@crowdstrike/logscale-parser-edit:1.205.1
@crowdstrike/logscale-parser-edit:1.205.2
@crowdstrike/logscale-search:1.205.1
@crowdstrike/logscale-search:1.205.2
@crowdstrike/tailwind-toucan-base:5.0.1
@crowdstrike/tailwind-toucan-base:5.0.2
@ctrl/deluge:1.2.0
@ctrl/deluge:7.2.1
@ctrl/deluge:7.2.2
@ctrl/golang-template:1.4.2
@ctrl/golang-template:1.4.3
@ctrl/magnet-link:4.0.3
@ctrl/magnet-link:4.0.4
@ctrl/ngx-codemirror:7.0.1
@ctrl/ngx-codemirror:7.0.2
@ctrl/ngx-csv:6.0.1
@ctrl/ngx-csv:6.0.2
@ctrl/ngx-emoji-mart:9.2.1
@ctrl/ngx-emoji-mart:9.2.2
@ctrl/ngx-rightclick:4.0.1
@ctrl/ngx-rightclick:4.0.2
@ctrl/qbittorrent:9.7.1
@ctrl/qbittorrent:9.7.2
@ctrl/react-adsense:2.0.1
@ctrl/react-adsense:2.0.2
@ctrl/shared-torrent:6.3.1
@ctrl/shared-torrent:6.3.2
@ctrl/tinycolor:4.1.1
@ctrl/tinycolor:4.1.2
@ctrl/torrent-file:4.1.1
@ctrl/torrent-file:4.1.2
@ctrl/transmission:7.3.1
@ctrl/ts-base32:4.0.1
@ctrl/ts-base32:4.0.2
@dev-blinq/ai-qa-logic:1.0.19
@dev-blinq/blinqioclient:1.0.21
@dev-blinq/cucumber-js:1.0.131
@dev-blinq/cucumber_client:1.0.738
@dev-blinq/ui-systems:1.0.93
@duckdb/duckdb-wasm:1.29.2
@duckdb/node-api:1.3.3
@duckdb/node-bindings:1.3.3
@ensdomains/address-encoder:1.1.5
@ensdomains/blacklist:1.0.1
@ensdomains/buffer:0.1.2
@ensdomains/ccip-read-cf-worker:0.0.4
@ensdomains/ccip-read-dns-gateway:0.1.1
@ensdomains/ccip-read-router:0.0.7
@ensdomains/ccip-read-worker-viem:0.0.4
@ensdomains/content-hash:3.0.1
@ensdomains/curvearithmetics:1.0.1
@ensdomains/cypress-metamask:1.2.1
@ensdomains/dnsprovejs:0.5.3
@ensdomains/dnssec-oracle-anchors:0.0.2
@ensdomains/dnssecoraclejs:0.2.9
@ensdomains/durin-middleware:0.0.2
@ensdomains/durin:0.1.2
@ensdomains/ens-archived-contracts:0.0.3
@ensdomains/ens-avatar:1.0.4
@ensdomains/ens-contracts:1.6.1
@ensdomains/ens-test-env:1.0.2
@ensdomains/ens-validation:0.1.1
@ensdomains/ensjs-react:0.0.5
@ensdomains/ensjs:4.0.3
@ensdomains/eth-ens-namehash:2.0.16
@ensdomains/hackathon-registrar:1.0.5
@ensdomains/hardhat-chai-matchers-viem:0.1.15
@ensdomains/hardhat-toolbox-viem-extended:0.0.6
@ensdomains/mock:2.1.52
@ensdomains/name-wrapper:1.0.1
@ensdomains/offchain-resolver-contracts:0.2.2
@ensdomains/op-resolver-contracts:0.0.2
@ensdomains/react-ens-address:0.0.32
@ensdomains/renewal-widget:0.1.10
@ensdomains/renewal:0.0.13
@ensdomains/reverse-records:1.0.1
@ensdomains/server-analytics:0.0.2
@ensdomains/solsha1:0.0.4
@ensdomains/subdomain-registrar:0.2.4
@ensdomains/test-utils:1.3.1
@ensdomains/thorin:0.6.51
@ensdomains/ui:3.4.6
@ensdomains/unicode-confusables:0.1.1
@ensdomains/unruggable-gateways:0.0.3
@ensdomains/vite-plugin-i18next-loader:4.0.4
@ensdomains/web3modal:1.10.2
@everreal/react-charts:2.0.2
@everreal/validate-esmoduleinterop-imports:1.4.4
@everreal/validate-esmoduleinterop-imports:1.4.5
@everreal/web-analytics:0.0.2
@faq-component/core:0.0.4
@faq-component/react:1.0.1
@fishingbooker/browser-sync-plugin:1.0.5
@fishingbooker/react-loader:1.0.7
@fishingbooker/react-pagination:2.0.6
@fishingbooker/react-raty:2.0.1
@fishingbooker/react-swiper:0.1.5
@hapheus/n8n-nodes-pgp:1.5.1
@hestjs/core:0.2.1
@hestjs/core:1.0.1
@hestjs/core:1.0.2
@hestjs/cqrs:0.1.6
@hestjs/demo:0.1.2
@hestjs/eslint-config:0.1.2
@hestjs/logger:0.1.6
@hestjs/scalar:0.1.7
@hestjs/validation:0.1.6
@hover-design/core:0.0.1
@hover-design/react:0.2.1
@huntersofbook/auth-vue:0.4.2
@huntersofbook/core-nuxt:0.4.2
@huntersofbook/core:0.5.1
@huntersofbook/form-naiveui:0.5.1
@huntersofbook/i18n:0.8.2
@huntersofbook/ui:0.5.1
@hyperlook/telemetry-sdk:1.0.19
@ifelsedeveloper/protocol-contracts-svm-idl:0.1.2
@ifelsedeveloper/protocol-contracts-svm-idl:0.1.3
@ifings/design-system:4.9.2
@ifings/metatron3:0.1.5
@jayeshsadhwani/telemetry-sdk:1.0.14
@kvytech/cli:0.0.7
@kvytech/components:0.0.2
@kvytech/habbit-e2e-test:0.0.2
@kvytech/medusa-plugin-announcement:0.0.8
@kvytech/medusa-plugin-management:0.0.5
@kvytech/medusa-plugin-newsletter:0.0.5
@kvytech/medusa-plugin-product-reviews:0.0.9
@kvytech/medusa-plugin-promotion:0.0.2
@kvytech/web:0.0.2
@lessondesk/api-client:9.12.2
@lessondesk/api-client:9.12.3
@lessondesk/babel-preset:1.0.1
@lessondesk/electron-group-api-client:1.0.3
@lessondesk/eslint-config:1.4.2
@lessondesk/material-icons:1.0.3
@lessondesk/react-table-context:2.0.4
@lessondesk/schoolbus:5.2.2
@lessondesk/schoolbus:5.2.3
@livecms/live-edit:0.0.32
@livecms/nuxt-live-edit:1.9.2
@lokeswari-satyanarayanan/rn-zustand-expo-template:1.0.9
@louisle2/core:1.0.1
@louisle2/cortex-js:0.1.6
@lpdjs/firestore-repo-service:1.0.1
@lui-ui/lui-nuxt:0.1.1
@lui-ui/lui-tailwindcss:0.1.2
@lui-ui/lui-vue:1.0.13
@markvivanco/app-version-checker:1.0.1
@markvivanco/app-version-checker:1.0.2
@mcp-use/cli:2.2.6
@mcp-use/cli:2.2.7
@mcp-use/inspector:0.6.2
@mcp-use/inspector:0.6.3
@mcp-use/mcp-use:1.0.1
@mcp-use/mcp-use:1.0.2
@micado-digital/stadtmarketing-kufstein-external:1.9.1
@mizzle-dev/orm:0.0.2
@mparpaillon/connector-parse:1.0.1
@mparpaillon/imagesloaded:4.1.2
@mparpaillon/page:1.0.1
@nativescript-community/arraybuffers:1.1.6
@nativescript-community/arraybuffers:1.1.7
@nativescript-community/arraybuffers:1.1.8
@nativescript-community/gesturehandler:2.0.35
@nativescript-community/perms:3.0.5
@nativescript-community/perms:3.0.6
@nativescript-community/perms:3.0.7
@nativescript-community/perms:3.0.8
@nativescript-community/perms:3.0.9
@nativescript-community/push:1.0.0
@nativescript-community/sentry:4.6.43
@nativescript-community/sqlite:3.5.2
@nativescript-community/sqlite:3.5.3
@nativescript-community/sqlite:3.5.4
@nativescript-community/sqlite:3.5.5
@nativescript-community/text:1.6.10
@nativescript-community/text:1.6.11
@nativescript-community/text:1.6.12
@nativescript-community/text:1.6.13
@nativescript-community/text:1.6.9
@nativescript-community/typeorm:0.2.30
@nativescript-community/typeorm:0.2.31
@nativescript-community/typeorm:0.2.32
@nativescript-community/typeorm:0.2.33
@nativescript-community/ui-collectionview:6.0.6
@nativescript-community/ui-document-picker:1.1.27
@nativescript-community/ui-document-picker:1.1.28
@nativescript-community/ui-drawer:0.1.30
@nativescript-community/ui-image:4.5.6
@nativescript-community/ui-label:1.3.35
@nativescript-community/ui-label:1.3.36
@nativescript-community/ui-label:1.3.37
@nativescript-community/ui-material-activityindicator:7.2.49
@nativescript-community/ui-material-bottom-navigation:7.2.72
@nativescript-community/ui-material-bottom-navigation:7.2.73
@nativescript-community/ui-material-bottom-navigation:7.2.74
@nativescript-community/ui-material-bottom-navigation:7.2.75
@nativescript-community/ui-material-bottomnavigationbar:7.2.49
@nativescript-community/ui-material-bottomsheet:7.2.49
@nativescript-community/ui-material-bottomsheet:7.2.72
@nativescript-community/ui-material-button:7.2.49
@nativescript-community/ui-material-cardview:7.2.49
@nativescript-community/ui-material-core-tabs:7.2.72
@nativescript-community/ui-material-core-tabs:7.2.73
@nativescript-community/ui-material-core-tabs:7.2.74
@nativescript-community/ui-material-core-tabs:7.2.75
@nativescript-community/ui-material-core-tabs:7.2.76
@nativescript-community/ui-material-core:7.2.49
@nativescript-community/ui-material-core:7.2.72
@nativescript-community/ui-material-core:7.2.73
@nativescript-community/ui-material-core:7.2.74
@nativescript-community/ui-material-core:7.2.75
@nativescript-community/ui-material-core:7.2.76
@nativescript-community/ui-material-dialogs:7.2.49
@nativescript-community/ui-material-floatingactionbutton:7.2.49
@nativescript-community/ui-material-progress:7.2.49
@nativescript-community/ui-material-ripple:7.2.49
@nativescript-community/ui-material-ripple:7.2.72
@nativescript-community/ui-material-ripple:7.2.73
@nativescript-community/ui-material-ripple:7.2.74
@nativescript-community/ui-material-ripple:7.2.75
@nativescript-community/ui-material-slider:7.2.49
@nativescript-community/ui-material-snackbar:7.2.49
@nativescript-community/ui-material-tabs:7.2.49
@nativescript-community/ui-material-tabs:7.2.72
@nativescript-community/ui-material-tabs:7.2.73
@nativescript-community/ui-material-tabs:7.2.74
@nativescript-community/ui-material-tabs:7.2.75
@nativescript-community/ui-material-textfield:7.2.49
@nativescript-community/ui-material-textview:7.2.49
@nativescript-community/ui-pager:14.1.35
@nativescript-community/ui-pager:14.1.36
@nativescript-community/ui-pager:14.1.37
@nativescript-community/ui-pager:14.1.38
@nativescript-community/ui-pulltorefresh:2.5.4
@nativescript-community/ui-pulltorefresh:2.5.5
@nativescript-community/ui-pulltorefresh:2.5.6
@nativescript-community/ui-pulltorefresh:2.5.7
@nexe/config-manager:0.1.1
@nexe/eslint-config:0.1.1
@nexe/logger:0.1.3
@nstudio/angular:20.0.4
@nstudio/angular:20.0.5
@nstudio/angular:20.0.6
@nstudio/focus:20.0.4
@nstudio/focus:20.0.5
@nstudio/focus:20.0.6
@nstudio/nativescript-checkbox:2.0.6
@nstudio/nativescript-checkbox:2.0.7
@nstudio/nativescript-checkbox:2.0.8
@nstudio/nativescript-checkbox:2.0.9
@nstudio/nativescript-loading-indicator:5.0.1
@nstudio/nativescript-loading-indicator:5.0.2
@nstudio/nativescript-loading-indicator:5.0.3
@nstudio/nativescript-loading-indicator:5.0.4
@nstudio/ui-collectionview:5.1.11
@nstudio/ui-collectionview:5.1.12
@nstudio/ui-collectionview:5.1.13
@nstudio/ui-collectionview:5.1.14
@nstudio/web-angular:20.0.4
@nstudio/web:20.0.4
@nstudio/xplat-utils:20.0.4
@nstudio/xplat-utils:20.0.5
@nstudio/xplat-utils:20.0.6
@nstudio/xplat-utils:20.0.7
@nstudio/xplat:20.0.4
@nstudio/xplat:20.0.5
@nstudio/xplat:20.0.6
@nstudio/xplat:20.0.7
@ntnx/passport-wso2:0.0.3
@ntnx/t:0.0.101
@oku-ui/accordion:0.6.2
@oku-ui/alert-dialog:0.6.2
@oku-ui/arrow:0.6.2
@oku-ui/aspect-ratio:0.6.2
@oku-ui/avatar:0.6.2
@oku-ui/checkbox:0.6.3
@oku-ui/collapsible:0.6.2
@oku-ui/collection:0.6.2
@oku-ui/dialog:0.6.2
@oku-ui/direction:0.6.2
@oku-ui/dismissable-layer:0.6.2
@oku-ui/focus-guards:0.6.2
@oku-ui/focus-scope:0.6.2
@oku-ui/hover-card:0.6.2
@oku-ui/label:0.6.2
@oku-ui/menu:0.6.2
@oku-ui/motion-nuxt:0.2.2
@oku-ui/motion:0.4.4
@oku-ui/popover:0.6.2
@oku-ui/popper:0.6.2
@oku-ui/portal:0.6.2
@oku-ui/presence:0.6.2
@oku-ui/primitive:0.6.2
@oku-ui/primitives-nuxt:0.3.1
@oku-ui/primitives:0.7.9
@oku-ui/progress:0.6.2
@oku-ui/provide:0.6.2
@oku-ui/radio-group:0.6.2
@oku-ui/roving-focus:0.6.2
@oku-ui/scroll-area:0.6.2
@oku-ui/separator:0.6.2
@oku-ui/slider:0.6.2
@oku-ui/slot:0.6.2
@oku-ui/switch:0.6.2
@oku-ui/tabs:0.6.2
@oku-ui/toast:0.6.2
@oku-ui/toggle-group:0.6.2
@oku-ui/toggle:0.6.2
@oku-ui/toolbar:0.6.2
@oku-ui/tooltip:0.6.2
@oku-ui/use-composable:0.6.2
@oku-ui/utils:0.6.2
@oku-ui/visually-hidden:0.6.2
@operato/board:9.0.35
@operato/board:9.0.36
@operato/board:9.0.37
@operato/board:9.0.38
@operato/board:9.0.39
@operato/board:9.0.40
@operato/board:9.0.41
@operato/board:9.0.42
@operato/board:9.0.43
@operato/board:9.0.44
@operato/board:9.0.45
@operato/board:9.0.46
@operato/board:9.0.47
@operato/board:9.0.48
@operato/board:9.0.49
@operato/board:9.0.50
@operato/board:9.0.51
@operato/data-grist:9.0.29
@operato/data-grist:9.0.35
@operato/data-grist:9.0.36
@operato/data-grist:9.0.37
@operato/graphql:9.0.22
@operato/graphql:9.0.35
@operato/graphql:9.0.36
@operato/graphql:9.0.37
@operato/graphql:9.0.38
@operato/graphql:9.0.39
@operato/graphql:9.0.40
@operato/graphql:9.0.41
@operato/graphql:9.0.42
@operato/graphql:9.0.43
@operato/graphql:9.0.44
@operato/graphql:9.0.45
@operato/graphql:9.0.46
@operato/graphql:9.0.47
@operato/graphql:9.0.48
@operato/graphql:9.0.49
@operato/graphql:9.0.50
@operato/graphql:9.0.51
@operato/headroom:9.0.2
@operato/headroom:9.0.35
@operato/headroom:9.0.36
@operato/headroom:9.0.37
@operato/help:9.0.35
@operato/help:9.0.36
@operato/help:9.0.37
@operato/help:9.0.38
@operato/help:9.0.39
@operato/help:9.0.40
@operato/help:9.0.41
@operato/help:9.0.42
@operato/help:9.0.43
@operato/help:9.0.44
@operato/help:9.0.45
@operato/help:9.0.46
@operato/help:9.0.47
@operato/help:9.0.48
@operato/help:9.0.49
@operato/help:9.0.50
@operato/help:9.0.51
@operato/i18n:9.0.35
@operato/i18n:9.0.36
@operato/i18n:9.0.37
@operato/input:9.0.27
@operato/input:9.0.35
@operato/input:9.0.36
@operato/input:9.0.37
@operato/input:9.0.38
@operato/input:9.0.39
@operato/input:9.0.40
@operato/input:9.0.41
@operato/input:9.0.42
@operato/input:9.0.43
@operato/input:9.0.44
@operato/input:9.0.45
@operato/input:9.0.46
@operato/input:9.0.47
@operato/input:9.0.48
@operato/layout:9.0.35
@operato/layout:9.0.36
@operato/layout:9.0.37
@operato/popup:9.0.22
@operato/popup:9.0.35
@operato/popup:9.0.36
@operato/popup:9.0.37
@operato/popup:9.0.38
@operato/popup:9.0.39
@operato/popup:9.0.40
@operato/popup:9.0.41
@operato/popup:9.0.42
@operato/popup:9.0.43
@operato/popup:9.0.44
@operato/popup:9.0.45
@operato/popup:9.0.46
@operato/popup:9.0.47
@operato/popup:9.0.48
@operato/popup:9.0.49
@operato/popup:9.0.50
@operato/popup:9.0.51
@operato/pull-to-refresh:9.0.35
@operato/pull-to-refresh:9.0.36
@operato/pull-to-refresh:9.0.37
@operato/pull-to-refresh:9.0.38
@operato/pull-to-refresh:9.0.39
@operato/pull-to-refresh:9.0.40
@operato/pull-to-refresh:9.0.41
@operato/pull-to-refresh:9.0.42
@operato/pull-to-refresh:9.0.43
@operato/pull-to-refresh:9.0.44
@operato/pull-to-refresh:9.0.45
@operato/pull-to-refresh:9.0.46
@operato/pull-to-refresh:9.0.47
@operato/shell:9.0.22
@operato/shell:9.0.35
@operato/shell:9.0.36
@operato/shell:9.0.37
@operato/shell:9.0.38
@operato/shell:9.0.39
@operato/styles:9.0.2
@operato/styles:9.0.35
@operato/styles:9.0.36
@operato/styles:9.0.37
@operato/utils:9.0.22
@operato/utils:9.0.35
@operato/utils:9.0.36
@operato/utils:9.0.37
@operato/utils:9.0.38
@operato/utils:9.0.39
@operato/utils:9.0.40
@operato/utils:9.0.41
@operato/utils:9.0.42
@operato/utils:9.0.43
@operato/utils:9.0.44
@operato/utils:9.0.45
@operato/utils:9.0.46
@operato/utils:9.0.47
@operato/utils:9.0.48
@operato/utils:9.0.49
@operato/utils:9.0.50
@operato/utils:9.0.51
@orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode:2.0.5
@orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode:1.1.1
@orbitgtbelgium/orbit-components:1.2.9
@orbitgtbelgium/time-slider:1.0.187
@osmanekrem/bmad:1.0.6
@osmanekrem/error-handler:1.2.2
@pergel/cli:0.11.1
@pergel/module-box:0.6.1
@pergel/module-graphql:0.6.1
@pergel/module-ui:0.0.9
@pergel/nuxt:0.25.5
@posthog/agent:1.24.1
@posthog/ai:7.1.2
@posthog/automatic-cohorts-plugin:0.0.8
@posthog/bitbucket-release-tracker:0.0.8
@posthog/cli:0.5.15
@posthog/clickhouse:1.7.1
@posthog/core:1.5.6
@posthog/currency-normalization-plugin:0.0.8
@posthog/customerio-plugin:0.0.8
@posthog/databricks-plugin:0.0.8
@posthog/drop-events-on-property-plugin:0.0.8
@posthog/event-sequence-timer-plugin:0.0.8
@posthog/filter-out-plugin:0.0.8
@posthog/first-time-event-tracker:0.0.8
@posthog/geoip-plugin:0.0.8
@posthog/github-release-tracking-plugin:0.0.8
@posthog/gitub-star-sync-plugin:0.0.8
@posthog/heartbeat-plugin:0.0.8
@posthog/hedgehog-mode:0.0.42
@posthog/icons:0.36.1
@posthog/ingestion-alert-plugin:0.0.8
@posthog/intercom-plugin:0.0.8
@posthog/kinesis-plugin:0.0.8
@posthog/laudspeaker-plugin:0.0.8
@posthog/lemon-ui:0.0.1
@posthog/maxmind-plugin:0.1.6
@posthog/migrator3000-plugin:0.0.8
@posthog/netdata-event-processing:0.0.8
@posthog/nextjs-config:1.5.1
@posthog/nextjs:0.0.3
@posthog/nuxt:1.2.9
@posthog/pagerduty-plugin:0.0.8
@posthog/piscina:3.2.1
@posthog/plugin-contrib:0.0.6
@posthog/plugin-server:1.10.8
@posthog/plugin-unduplicates:0.0.8
@posthog/postgres-plugin:0.0.8
@posthog/react-rrweb-player:1.1.4
@posthog/rrdom:0.0.31
@posthog/rrweb-player:0.0.31
@posthog/rrweb-record:0.0.31
@posthog/rrweb-replay:0.0.19
@posthog/rrweb-snapshot:0.0.31
@posthog/rrweb-utils:0.0.31
@posthog/rrweb:0.0.31
@posthog/sendgrid-plugin:0.0.8
@posthog/siphash:1.1.2
@posthog/snowflake-export-plugin:0.0.8
@posthog/taxonomy-plugin:0.0.8
@posthog/twilio-plugin:0.0.8
@posthog/twitter-followers-plugin:0.0.8
@posthog/url-normalizer-plugin:0.0.8
@posthog/variance-plugin:0.0.8
@posthog/web-dev-server:1.0.5
@posthog/wizard:1.18.1
@posthog/zendesk-plugin:0.0.8
@postman/aether-icons:2.23.2
@postman/aether-icons:2.23.4
@postman/csv-parse:4.0.3
@postman/csv-parse:4.0.4
@postman/csv-parse:4.0.5
@postman/final-node-keytar:7.9.1
@postman/final-node-keytar:7.9.2
@postman/final-node-keytar:7.9.3
@postman/mcp-ui-client:5.5.1
@postman/mcp-ui-client:5.5.2
@postman/mcp-ui-client:5.5.3
@postman/node-keytar:7.9.4
@postman/node-keytar:7.9.5
@postman/node-keytar:7.9.6
@postman/pm-bin-linux-x64:1.24.3
@postman/pm-bin-linux-x64:1.24.4
@postman/pm-bin-linux-x64:1.24.5
@postman/pm-bin-macos-arm64:1.24.3
@postman/pm-bin-macos-arm64:1.24.4
@postman/pm-bin-macos-arm64:1.24.5
@postman/pm-bin-macos-x64:1.24.3
@postman/pm-bin-macos-x64:1.24.5
@postman/pm-bin-windows-x64:1.24.3
@postman/pm-bin-windows-x64:1.24.4
@postman/pm-bin-windows-x64:1.24.5
@postman/postman-collection-fork:4.3.3
@postman/postman-collection-fork:4.3.4
@postman/postman-collection-fork:4.3.5
@postman/postman-mcp-cli:1.0.3
@postman/postman-mcp-cli:1.0.4
@postman/postman-mcp-cli:1.0.5
@postman/postman-mcp-server:2.4.10
@postman/postman-mcp-server:2.4.11
@postman/postman-mcp-server:2.4.12
@postman/pretty-ms:6.1.1
@postman/pretty-ms:6.1.2
@postman/pretty-ms:6.1.3
@postman/secret-scanner-wasm:2.1.2
@postman/secret-scanner-wasm:2.1.3
@postman/secret-scanner-wasm:2.1.4
@postman/tunnel-agent:0.6.5
@postman/tunnel-agent:0.6.6
@postman/tunnel-agent:0.6.7
@postman/wdio-allure-reporter:0.0.7
@postman/wdio-allure-reporter:0.0.9
@postman/wdio-junit-reporter:0.0.4
@postman/wdio-junit-reporter:0.0.5
@postman/wdio-junit-reporter:0.0.6
@pradhumngautam/common-app:1.0.2
@productdevbook/animejs-vue:0.2.1
@productdevbook/auth:0.2.2
@productdevbook/chatwoot:2.0.1
@productdevbook/motion:1.0.4
@productdevbook/ts-i18n:1.4.2
@pruthvi21/use-debounce:1.0.3
@quick-start-soft/quick-document-translator:1.4.2511142126
@quick-start-soft/quick-git-clean-markdown:1.4.2511142126
@quick-start-soft/quick-markdown-compose:1.4.2506300029
@quick-start-soft/quick-markdown-image:1.4.2511142126
@quick-start-soft/quick-markdown-print:1.4.2511142126
@quick-start-soft/quick-markdown-translator:1.4.2509202331
@quick-start-soft/quick-markdown:1.4.2511142126
@quick-start-soft/quick-remove-image-background:1.4.2511142126
@quick-start-soft/quick-task-refine:1.4.2511142126
@relyt/claude-context-core:0.1.1
@relyt/claude-context-mcp:0.1.1
@relyt/mcp-server-relytone:0.0.3
@rxap/ngx-bootstrap:19.0.3
@rxap/ngx-bootstrap:19.0.4
@sameepsi/sor2:2.0.2
@sameepsi/sor:1.0.3
@seezo/sdr-mcp-server:0.0.5
@seung-ju/next:0.0.2
@seung-ju/openapi-generator:0.0.4
@seung-ju/react-hooks:0.0.2
@seung-ju/react-native-action-sheet:0.2.1
@silgi/better-auth:0.8.1
@silgi/drizzle:0.8.4
@silgi/ecosystem:0.7.6
@silgi/graphql:0.7.15
@silgi/module-builder:0.8.8
@silgi/openapi:0.7.4
@silgi/permission:0.6.8
@silgi/ratelimit:0.2.1
@silgi/scalar:0.6.2
@silgi/yoga:0.7.1
@sme-ui/aoma-vevasound-metadata-lib:0.1.3
@strapbuild/react-native-date-time-picker:2.0.4
@strapbuild/react-native-perspective-image-cropper-2:0.4.7
@strapbuild/react-native-perspective-image-cropper-poojan31:0.4.6
@strapbuild/react-native-perspective-image-cropper:0.4.15
@suraj_h/medium-common:1.0.5
@teselagen/bio-parsers:0.4.29
@teselagen/bio-parsers:0.4.30
@teselagen/bounce-loader:0.3.16
@teselagen/bounce-loader:0.3.17
@teselagen/file-utils:0.3.21
@teselagen/file-utils:0.3.22
@teselagen/liquibase-tools:0.4.1
@teselagen/ove:0.7.39
@teselagen/ove:0.7.40
@teselagen/range-utils:0.3.14
@teselagen/range-utils:0.3.15
@teselagen/react-list:0.8.19
@teselagen/react-list:0.8.20
@teselagen/react-table:6.10.19
@teselagen/react-table:6.10.20
@teselagen/react-table:6.10.21
@teselagen/react-table:6.10.22
@teselagen/sequence-utils:0.3.33
@teselagen/sequence-utils:0.3.34
@teselagen/ui:0.9.10
@teselagen/ui:0.9.9
@thangved/callback-window:1.1.4
@thedelta/eslint-config:1.0.2
@things-factory/attachment-base:9.0.42
@things-factory/attachment-base:9.0.43
@things-factory/attachment-base:9.0.44
@things-factory/attachment-base:9.0.45
@things-factory/attachment-base:9.0.46
@things-factory/attachment-base:9.0.47
@things-factory/attachment-base:9.0.48
@things-factory/attachment-base:9.0.49
@things-factory/attachment-base:9.0.50
@things-factory/attachment-base:9.0.51
@things-factory/attachment-base:9.0.52
@things-factory/attachment-base:9.0.53
@things-factory/attachment-base:9.0.54
@things-factory/attachment-base:9.0.55
@things-factory/auth-base:9.0.42
@things-factory/auth-base:9.0.43
@things-factory/auth-base:9.0.44
@things-factory/auth-base:9.0.45
@things-factory/email-base:9.0.42
@things-factory/email-base:9.0.43
@things-factory/email-base:9.0.44
@things-factory/email-base:9.0.45
@things-factory/email-base:9.0.46
@things-factory/email-base:9.0.47
@things-factory/email-base:9.0.48
@things-factory/email-base:9.0.49
@things-factory/email-base:9.0.50
@things-factory/email-base:9.0.51
@things-factory/email-base:9.0.52
@things-factory/email-base:9.0.53
@things-factory/email-base:9.0.54
@things-factory/email-base:9.0.55
@things-factory/email-base:9.0.56
@things-factory/email-base:9.0.57
@things-factory/email-base:9.0.58
@things-factory/email-base:9.0.59
@things-factory/env:9.0.42
@things-factory/env:9.0.43
@things-factory/env:9.0.44
@things-factory/env:9.0.45
@things-factory/integration-base:9.0.42
@things-factory/integration-base:9.0.43
@things-factory/integration-base:9.0.44
@things-factory/integration-base:9.0.45
@things-factory/integration-marketplace:9.0.42
@things-factory/integration-marketplace:9.0.43
@things-factory/integration-marketplace:9.0.44
@things-factory/integration-marketplace:9.0.45
@things-factory/shell:9.0.42
@things-factory/shell:9.0.43
@things-factory/shell:9.0.44
@things-factory/shell:9.0.45
@tiaanduplessis/json:2.0.2
@tiaanduplessis/json:2.0.3
@tiaanduplessis/react-progressbar:1.0.1
@tiaanduplessis/react-progressbar:1.0.2
@tnf-dev/api:1.0.8
@tnf-dev/core:1.0.8
@tnf-dev/js:1.0.8
@tnf-dev/mui:1.0.8
@tnf-dev/react:1.0.8
@trackstar/angular-trackstar-link:1.0.2
@trackstar/react-trackstar-link-upgrade:1.1.10
@trackstar/react-trackstar-link:2.0.21
@trackstar/test-angular-package:0.0.9
@trackstar/test-package:1.1.5
@trefox/sleekshop-js:0.1.6
@trigo/atrix-acl:4.0.2
@trigo/atrix-elasticsearch:2.0.1
@trigo/atrix-mongoose:1.0.2
@trigo/atrix-orientdb:1.0.2
@trigo/atrix-postgres:1.0.3
@trigo/atrix-pubsub:4.0.3
@trigo/atrix-redis:1.0.2
@trigo/atrix-soap:1.0.2
@trigo/atrix-swagger:3.0.1
@trigo/atrix:7.0.1
@trigo/bool-expressions:4.1.3
@trigo/eslint-config-trigo:3.3.1
@trigo/fsm:3.4.2
@trigo/hapi-auth-signedlink:1.3.1
@trigo/jsdt:0.2.1
@trigo/keycloak-api:1.3.1
@trigo/node-soap:0.5.4
@trigo/pathfinder-ui-css:0.1.1
@trigo/trigo-hapijs:5.0.1
@trpc-rate-limiter/cloudflare:0.1.4
@trpc-rate-limiter/hono:0.1.4
@ui-ux-gang/devextreme-angular-rpk:24.1.7
@ui-ux-gang/devextreme-rpk:24.1.7
@varsityvibe/api-client:1.3.36
@varsityvibe/api-client:1.3.37
@varsityvibe/utils:5.0.6
@varsityvibe/validation-schemas:0.6.7
@varsityvibe/validation-schemas:0.6.8
@viapip/eslint-config:0.2.4
@vietmoney/react-big-calendar:0.26.0
@vietmoney/react-big-calendar:0.26.1
@vietmoney/react-big-calendar:0.26.2
@vishadtyagi/full-year-calendar:0.1.11
@voiceflow/alexa-types:2.15.61
@voiceflow/anthropic:0.4.4
@voiceflow/anthropic:0.4.5
@voiceflow/api-sdk:3.28.59
@voiceflow/backend-utils:5.0.1
@voiceflow/backend-utils:5.0.2
@voiceflow/base-types:2.136.2
@voiceflow/base-types:2.136.3
@voiceflow/body-parser:1.21.2
@voiceflow/body-parser:1.21.3
@voiceflow/chat-types:2.14.58
@voiceflow/chat-types:2.14.59
@voiceflow/circleci-config-sdk-orb-import:0.2.1
@voiceflow/circleci-config-sdk-orb-import:0.2.2
@voiceflow/commitlint-config:2.6.1
@voiceflow/commitlint-config:2.6.2
@voiceflow/common:8.9.1
@voiceflow/common:8.9.2
@voiceflow/default-prompt-wrappers:1.7.3
@voiceflow/default-prompt-wrappers:1.7.4
@voiceflow/dependency-cruiser-config:1.8.11
@voiceflow/dependency-cruiser-config:1.8.12
@voiceflow/dtos-interact:1.40.1
@voiceflow/dtos-interact:1.40.2
@voiceflow/encryption:0.3.2
@voiceflow/encryption:0.3.3
@voiceflow/eslint-config:7.16.4
@voiceflow/eslint-config:7.16.5
@voiceflow/eslint-plugin:1.6.1
@voiceflow/eslint-plugin:1.6.2
@voiceflow/exception:1.10.1
@voiceflow/exception:1.10.2
@voiceflow/fetch:1.11.1
@voiceflow/fetch:1.11.2
@voiceflow/general-types:3.2.22
@voiceflow/general-types:3.2.23
@voiceflow/git-branch-check:1.4.3
@voiceflow/git-branch-check:1.4.4
@voiceflow/google-dfes-types:2.17.12
@voiceflow/google-dfes-types:2.17.13
@voiceflow/google-types:2.21.13
@voiceflow/husky-config:1.3.1
@voiceflow/husky-config:1.3.2
@voiceflow/logger:2.4.2
@voiceflow/logger:2.4.3
@voiceflow/metrics:1.5.1
@voiceflow/metrics:1.5.2
@voiceflow/natural-language-commander:0.5.2
@voiceflow/natural-language-commander:0.5.3
@voiceflow/nestjs-common:2.75.2
@voiceflow/nestjs-common:2.75.3
@voiceflow/nestjs-mongodb:1.3.1
@voiceflow/nestjs-mongodb:1.3.2
@voiceflow/nestjs-rate-limit:1.3.2
@voiceflow/nestjs-rate-limit:1.3.3
@voiceflow/nestjs-redis:1.3.1
@voiceflow/nestjs-redis:1.3.2
@voiceflow/nestjs-timeout:1.3.1
@voiceflow/nestjs-timeout:1.3.2
@voiceflow/npm-package-json-lint-config:1.1.1
@voiceflow/openai:3.2.2
@voiceflow/openai:3.2.3
@voiceflow/pino-pretty:4.4.1
@voiceflow/pino-pretty:4.4.2
@voiceflow/pino:6.11.3
@voiceflow/pino:6.11.4
@voiceflow/prettier-config:1.10.1
@voiceflow/prettier-config:1.10.2
@voiceflow/react-chat:1.65.4
@voiceflow/runtime-client-js:1.17.2
@voiceflow/runtime-client-js:1.17.3
@voiceflow/runtime:1.29.1
@voiceflow/runtime:1.29.2
@voiceflow/sdk-runtime:1.43.1
@voiceflow/sdk-runtime:1.43.2
@voiceflow/secrets-provider:1.9.2
@voiceflow/secrets-provider:1.9.3
@voiceflow/semantic-release-config:1.4.1
@voiceflow/semantic-release-config:1.4.2
@voiceflow/serverless-plugin-typescript:2.1.7
@voiceflow/serverless-plugin-typescript:2.1.8
@voiceflow/slate-serializer:1.7.3
@voiceflow/slate-serializer:1.7.4
@voiceflow/stitches-react:2.3.2
@voiceflow/stitches-react:2.3.3
@voiceflow/storybook-config:1.2.2
@voiceflow/storybook-config:1.2.3
@voiceflow/stylelint-config:1.1.1
@voiceflow/stylelint-config:1.1.2
@voiceflow/test-common:2.1.1
@voiceflow/test-common:2.1.2
@voiceflow/tsconfig-paths:1.1.4
@voiceflow/tsconfig-paths:1.1.5
@voiceflow/tsconfig:1.12.1
@voiceflow/tsconfig:1.12.2
@voiceflow/utils-designer:1.74.20
@voiceflow/verror:1.1.4
@voiceflow/verror:1.1.5
@voiceflow/vite-config:2.6.2
@voiceflow/vite-config:2.6.3
@voiceflow/vitest-config:1.10.2
@voiceflow/vitest-config:1.10.3
@voiceflow/voice-types:2.10.58
@voiceflow/voice-types:2.10.59
@voiceflow/voiceflow-types:3.32.45
@voiceflow/voiceflow-types:3.32.46
@voiceflow/widget:1.7.18
@voiceflow/widget:1.7.19
@vucod/email:0.0.3
@yoobic/design-system:6.5.17
@yoobic/jpeg-camera-es6:1.0.13
@yoobic/yobi:8.7.53
@zapier/ai-actions-react:0.1.12
@zapier/ai-actions-react:0.1.13
@zapier/ai-actions-react:0.1.14
@zapier/ai-actions:0.1.18
@zapier/ai-actions:0.1.19
@zapier/ai-actions:0.1.20
@zapier/babel-preset-zapier:6.4.1
@zapier/babel-preset-zapier:6.4.2
@zapier/babel-preset-zapier:6.4.3
@zapier/browserslist-config-zapier:1.0.3
@zapier/browserslist-config-zapier:1.0.4
@zapier/browserslist-config-zapier:1.0.5
@zapier/eslint-plugin-zapier:11.0.3
@zapier/eslint-plugin-zapier:11.0.4
@zapier/eslint-plugin-zapier:11.0.5
@zapier/mcp-integration:3.0.1
@zapier/mcp-integration:3.0.2
@zapier/mcp-integration:3.0.3
@zapier/secret-scrubber:1.1.3
@zapier/secret-scrubber:1.1.4
@zapier/secret-scrubber:1.1.5
@zapier/spectral-api-ruleset:1.9.1
@zapier/spectral-api-ruleset:1.9.2
@zapier/spectral-api-ruleset:1.9.3
@zapier/stubtree:0.1.2
@zapier/stubtree:0.1.3
@zapier/stubtree:0.1.4
@zapier/zapier-sdk:0.15.5
@zapier/zapier-sdk:0.15.6
@zapier/zapier-sdk:0.15.7
ace-colorpicker-rpk:0.0.14
ai-crowl-shield:1.0.7
airchief:0.3.1
airpilot:0.8.8
angulartics2:14.1.1
angulartics2:14.1.2
another-shai:1.0.1
ansi-regex:6.2.1
ansi-styles:6.2.2
arc-cli-fc:1.0.1
asciitranslator:1.0.3
asyncapi-preview:1.0.1
asyncapi-preview:1.0.2
atrix-mongoose:1.0.1
atrix:1.0.1
automation_model:1.0.491
avvvatars-vue:1.1.2
axios-builder:1.2.1
axios-cancelable:1.0.1
axios-cancelable:1.0.2
axios-timed:1.0.1
axios-timed:1.0.2
babel-preset-kinvey-flex-service:0.1.1
backslash:0.2.1
barebones-css:1.1.3
barebones-css:1.1.4
benmostyn-frame-print:1.0.1
best_gpio_controller:1.0.10
better-auth-nuxt:0.0.10
better-queue-nedb:0.1.5
bidirectional-adapter:1.2.2
bidirectional-adapter:1.2.3
bidirectional-adapter:1.2.4
bidirectional-adapter:1.2.5
blinqio-executions-cli:1.0.41
blob-to-base64:1.0.3
bool-expressions:0.1.2
browser-webdriver-downloader:3.0.8
buffered-interpolation-babylon6:0.2.8
bun-plugin-httpfile:0.1.1
bytecode-checker-cli:1.0.10
bytecode-checker-cli:1.0.11
bytecode-checker-cli:1.0.8
bytecode-checker-cli:1.0.9
bytes-to-x:1.0.1
calc-loan-interest:1.0.4
capacitor-notificationhandler:0.0.2
capacitor-notificationhandler:0.0.3
capacitor-plugin-apptrackingios:0.0.21
capacitor-plugin-healthapp:0.0.2
capacitor-plugin-healthapp:0.0.3
capacitor-plugin-ihealth:1.1.8
capacitor-plugin-ihealth:1.1.9
capacitor-plugin-purchase:0.1.1
capacitor-plugin-scgssigninwithgoogle:0.0.5
capacitor-plugin-vonage:1.0.2
capacitor-plugin-vonage:1.0.3
capacitor-purchase-history:0.0.10
capacitor-voice-recorder-wav:6.0.3
capacitorandroidpermissions:0.0.4
capacitorandroidpermissions:0.0.5
ceviz:0.0.5
chalk-template:1.1.1
chalk:5.6.1
chrome-extension-downloads:0.0.3
chrome-extension-downloads:0.0.4
claude-token-updater:1.0.3
coinmarketcap-api:3.1.2
coinmarketcap-api:3.1.3
color-convert:3.1.1
color-name:2.0.1
color-string:2.1.1
colors-regex:2.0.1
command-irail:0.5.4
compare-obj:1.1.1
compare-obj:1.1.2
composite-reducer:1.0.2
composite-reducer:1.0.3
composite-reducer:1.0.4
composite-reducer:1.0.5
config-cordova:0.8.5
cordova-plugin-voxeet2:1.0.24
cordova-voxeet:1.0.32
count-it-down:1.0.1
count-it-down:1.0.2
cpu-instructions:0.0.14
create-director-app:0.1.1
create-glee-app:0.2.2
create-glee-app:0.2.3
create-hardhat3-app:1.1.1
create-hardhat3-app:1.1.2
create-hardhat3-app:1.1.3
create-hardhat3-app:1.1.4
create-hest-app:0.1.9
create-kinvey-flex-service:0.2.1
create-mcp-use-app:0.5.3
create-mcp-use-app:0.5.4
create-silgi:0.3.1
crypto-addr-codec:0.1.9
css-dedoupe:0.1.2
csv-tool-cli:1.2.1
dashboard-empty-state:1.0.3
db-evo:1.1.4
db-evo:1.1.5
debug:4.4.2
designstudiouiux:1.0.1
devextreme-angular-rpk:21.2.8
devextreme-rpk:21.2.8
devstart-cli:1.0.6
dialogflow-es:1.1.2
dialogflow-es:1.1.3
dialogflow-es:1.1.4
discord-bot-server:0.1.2
docusaurus-plugin-vanilla-extract:1.0.3
dont-go:1.1.2
dotnet-template:0.0.3
dotnet-template:0.0.4
drop-events-on-property-plugin:0.0.2
duckdb:1.3.3
easypanel-sdk:0.3.2
electron-volt:0.0.2
email-deliverability-tester:1.1.1
ember-browser-services:5.0.2
ember-browser-services:5.0.3
ember-headless-form-yup:1.0.1
ember-headless-form:1.1.2
ember-headless-form:1.1.3
ember-headless-table:2.1.5
ember-headless-table:2.1.6
ember-url-hash-polyfill:1.0.12
ember-url-hash-polyfill:1.0.13
ember-velcro:2.2.1
ember-velcro:2.2.2
encounter-playground:0.0.2
encounter-playground:0.0.3
encounter-playground:0.0.4
encounter-playground:0.0.5
enforce-branch-name:1.1.3
error-ex:1.3.3
esbuild-plugin-brotli:0.2.1
esbuild-plugin-eta:0.1.1
esbuild-plugin-httpfile:0.4.1
eslint-config-crowdstrike-node:4.0.3
eslint-config-crowdstrike-node:4.0.4
eslint-config-crowdstrike:11.0.2
eslint-config-crowdstrike:11.0.3
eslint-config-kinvey-flex-service:0.1.1
eslint-config-nitpicky:4.0.1
eslint-config-teselagen:6.1.7
eslint-config-teselagen:6.1.8
eslint-config-trigo:22.0.2
eslint-config-zeallat-base:1.0.4
ethereum-ens:0.8.1
evm-checkcode-cli:1.0.12
evm-checkcode-cli:1.0.13
evm-checkcode-cli:1.0.14
evm-checkcode-cli:1.0.15
exact-ticker:0.3.5
expo-audio-session:0.2.1
expo-router-on-rails:0.0.4
express-starter-template:1.0.10
expressos:1.1.3
fat-fingered:1.0.1
fat-fingered:1.0.2
feature-flip:1.0.1
feature-flip:1.0.2
firestore-search-engine:1.2.3
fittxt:1.0.2
fittxt:1.0.3
flapstacks:1.0.1
flapstacks:1.0.2
flatten-unflatten:1.0.1
flatten-unflatten:1.0.2
formik-error-focus:2.0.1
formik-store:1.0.1
frontity-starter-theme:1.0.1
fuzzy-finder:1.0.5
fuzzy-finder:1.0.6
gate-evm-check-code2:2.0.3
gate-evm-check-code2:2.0.4
gate-evm-check-code2:2.0.5
gate-evm-check-code2:2.0.6
gate-evm-tools-test:1.0.5
gate-evm-tools-test:1.0.6
gate-evm-tools-test:1.0.7
gate-evm-tools-test:1.0.8
gatsby-plugin-antd:2.2.1
gatsby-plugin-cname:1.0.1
gatsby-plugin-cname:1.0.2
generator-meteor-stock:0.1.6
generator-ng-itobuz:0.0.15
get-them-args:1.3.3
github-action-for-generator:2.1.27
github-action-for-generator:2.1.28
gitsafe:1.0.5
globalize-rpk:1.7.4
go-template:0.1.8
go-template:0.1.9
graphql-sequelize-teselagen:5.3.8
graphql-sequelize-teselagen:5.3.9
gulp-inject-envs:1.2.1
gulp-inject-envs:1.2.2
has-ansi:6.0.1
haufe-axera-api-client:0.0.2
hope-mapboxdraw:0.1.1
hopedraw:1.0.3
hover-design-prototype:0.0.5
html-to-base64-image:1.0.2
httpness:1.0.2
httpness:1.0.3
hyper-fullfacing:1.0.3
hyperterm-hipster:1.0.7
ids-css:1.5.1
ids-enterprise-mcp-server:0.0.2
ids-enterprise-ng:20.1.6
ids-enterprise-typings:20.1.6
image-to-uri:1.0.1
image-to-uri:1.0.2
insomnia-plugin-random-pick:1.0.4
invo:0.2.2
iron-shield-miniapp:0.0.2
is-arrayish:0.3.3
ito-button:8.0.3
itobuz-angular-auth:8.0.11
itobuz-angular-button:8.0.11
itobuz-angular:0.0.1
jacob-zuma:1.0.1
jacob-zuma:1.0.2
jaetut-varit-test:1.0.2
jan-browser:0.13.1
jquery-bindings:1.1.2
jquery-bindings:1.1.3
json-rules-engine-simplified:0.2.1
json-rules-engine-simplified:0.2.2
json-rules-engine-simplified:0.2.3
json-rules-engine-simplified:0.2.4
jsonsurge:1.0.7
jumpgate:0.0.2
just-toasty:1.7.1
kill-port:2.0.2
kill-port:2.0.3
kinetix-default-token-list:1.0.5
kinvey-cli-wrapper:0.3.1
kinvey-flex-scripts:0.5.1
kns-error-code:1.0.8
koa2-swagger-ui:5.11.1
koa2-swagger-ui:5.11.2
korea-administrative-area-geo-json-util:1.0.7
kwami:1.5.10
kwami:1.5.9
lang-codes:1.0.1
lang-codes:1.0.2
license-o-matic:1.2.1
license-o-matic:1.2.2
lint-staged-imagemin:1.3.1
lint-staged-imagemin:1.3.2
lite-serper-mcp-server:0.2.2
lui-vue-test:0.70.9
luno-api:1.2.3
m25-transaction-utils:1.1.16
manual-billing-system-miniapp-api:1.3.1
mcfly-semantic-release:1.3.1
mcp-knowledge-base:0.0.2
mcp-knowledge-graph:1.2.1
mcp-use:1.4.2
mcp-use:1.4.3
medusa-plugin-announcement:0.0.3
medusa-plugin-logs:0.0.17
medusa-plugin-momo:0.0.68
medusa-plugin-product-reviews-kvy:0.0.4
medusa-plugin-zalopay:0.0.40
mobioffice-cli:1.0.3
mod10-check-digit:1.0.1
mon-package-react-typescript:1.0.1
monorepo-next:13.0.1
monorepo-next:13.0.2
mstate-angular:0.4.4
mstate-cli:0.4.7
mstate-dev-react:1.1.1
mstate-react:1.6.5
my-saeed-lib:0.1.1
n8n-nodes-tmdb:0.5.1
n8n-nodes-vercel-ai-sdk:0.1.7
n8n-nodes-viral-app:0.2.5
nanoreset:7.0.1
nanoreset:7.0.2
next-circular-dependency:1.0.2
next-circular-dependency:1.0.3
next-simple-google-analytics:1.1.1
next-simple-google-analytics:1.1.2
next-styled-nprogress:1.0.4
next-styled-nprogress:1.0.5
ng-imports-checker:0.0.10
ng-imports-checker:0.0.9
ng2-file-upload:7.0.2
ng2-file-upload:7.0.3
ng2-file-upload:8.0.1
ng2-file-upload:8.0.2
ng2-file-upload:8.0.3
ng2-file-upload:9.0.1
ngx-bootstrap:18.1.4
ngx-bootstrap:19.0.3
ngx-bootstrap:19.0.4
ngx-bootstrap:20.0.3
ngx-bootstrap:20.0.4
ngx-bootstrap:20.0.5
ngx-bootstrap:20.0.6
ngx-color:10.0.1
ngx-color:10.0.2
ngx-toastr:19.0.1
ngx-toastr:19.0.2
ngx-trend:8.0.1
ngx-useful-swiper-prosenjit:9.0.2
ngx-wooapi:12.0.1
ngx-ws:1.1.5
ngx-ws:1.1.6
nitro-graphql:1.5.12
nitro-kutu:0.1.1
nitrodeploy:1.0.8
nitroping:0.1.1
normal-store:1.3.1
normal-store:1.3.2
normal-store:1.3.3
normal-store:1.3.4
nuxt-keycloak:0.2.2
obj-to-css:1.0.2
obj-to-css:1.0.3
okta-react-router-6:5.0.1
open2internet:0.1.1
oradm-to-gql:35.0.14
oradm-to-gql:35.0.15
oradm-to-sqlz:1.1.2
oradm-to-sqlz:1.1.3
oradm-to-sqlz:1.1.4
oradm-to-sqlz:1.1.5
orbit-boxicons:2.1.3
orbit-nebula-draw-tools:1.0.10
orbit-nebula-editor:1.0.2
orbit-soap:0.43.13
orchestrix:12.1.2
ove-auto-annotate:0.0.10
ove-auto-annotate:0.0.9
package-tester:1.0.1
parcel-plugin-asset-copier:1.1.2
parcel-plugin-asset-copier:1.1.3
pdf-annotation:0.0.2
pergel:0.13.2
pergeltest:0.0.25
piclite:1.0.1
pico-uid:1.0.3
pico-uid:1.0.4
pkg-readme:1.1.1
pm2-gelf-json:1.0.4
pm2-gelf-json:1.0.5
poper-react-sdk:0.1.2
posthog-docusaurus:2.0.6
posthog-js:1.297.3
posthog-node:4.18.1
posthog-node:5.11.3
posthog-node:5.13.3
posthog-plugin-hello-world:1.0.1
posthog-react-native-session-replay:1.2.2
posthog-react-native:4.11.1
posthog-react-native:4.12.5
prebid:10.9.1
prebid:10.9.2
prime-one-table:0.0.19
printjs-rpk:1.6.1
prompt-eng-server:1.0.18
prompt-eng:1.0.50
proto-tinker-wc:0.1.87
puny-req:1.0.3
quickswap-ads-list:1.0.33
quickswap-default-staking-list-address:1.0.55
quickswap-default-staking-list:1.0.11
quickswap-default-token-list:1.5.16
quickswap-router-sdk:1.0.1
quickswap-sdk:3.0.44
quickswap-smart-order-router:1.0.1
quickswap-token-lists:1.0.3
quickswap-v2-sdk:2.0.1
ra-auth-firebase:1.0.3
ra-data-firebase:1.0.7
ra-data-firebase:1.0.8
react-complaint-image:0.0.32
react-complaint-image:0.0.33
react-complaint-image:0.0.34
react-complaint-image:0.0.35
react-component-taggers:0.1.9
react-data-to-export:1.0.1
react-element-prompt-inspector:0.1.18
react-favic:1.0.2
react-hook-form-persist:3.0.1
react-hook-form-persist:3.0.2
react-jam-icons:1.0.1
react-jam-icons:1.0.2
react-jsonschema-form-conditionals:0.3.18
react-jsonschema-form-conditionals:0.3.19
react-jsonschema-form-conditionals:0.3.20
react-jsonschema-form-conditionals:0.3.21
react-jsonschema-form-extras:1.0.1
react-jsonschema-form-extras:1.0.2
react-jsonschema-form-extras:1.0.3
react-jsonschema-form-extras:1.0.4
react-jsonschema-rxnt-extras:0.4.6
react-jsonschema-rxnt-extras:0.4.7
react-jsonschema-rxnt-extras:0.4.8
react-jsonschema-rxnt-extras:0.4.9
react-keycloak-context:1.0.8
react-keycloak-context:1.0.9
react-library-setup:0.0.6
react-linear-loader:1.0.2
react-micromodal.js:1.0.1
react-micromodal.js:1.0.2
react-native-datepicker-modal:1.3.1
react-native-datepicker-modal:1.3.2
react-native-email:2.1.1
react-native-email:2.1.2
react-native-fetch:2.0.1
react-native-fetch:2.0.2
react-native-get-pixel-dimensions:1.0.1
react-native-get-pixel-dimensions:1.0.2
react-native-google-maps-directions:2.1.2
react-native-jam-icons:1.0.1
react-native-jam-icons:1.0.2
react-native-log-level:1.2.1
react-native-log-level:1.2.2
react-native-modest-checkbox:3.3.1
react-native-modest-storage:2.1.1
react-native-phone-call:1.2.1
react-native-phone-call:1.2.2
react-native-retriable-fetch:2.0.1
react-native-retriable-fetch:2.0.2
react-native-use-modal:1.0.3
react-native-view-finder:1.2.1
react-native-view-finder:1.2.2
react-native-websocket:1.0.3
react-native-websocket:1.0.4
react-native-worklet-functions:3.3.3
react-packery-component:1.0.3
react-qr-image:1.1.1
react-scrambled-text:1.0.4
rediff-viewer:0.0.7
rediff:1.0.5
redux-forge:2.5.3
redux-router-kit:1.2.2
redux-router-kit:1.2.3
redux-router-kit:1.2.4
remark-preset-lint-crowdstrike:4.0.1
remark-preset-lint-crowdstrike:4.0.2
revenuecat:1.0.1
rollup-plugin-httpfile:0.2.1
rxnt-authentication:0.0.3
rxnt-authentication:0.0.4
rxnt-authentication:0.0.5
rxnt-authentication:0.0.6
rxnt-healthchecks-nestjs:1.0.2
rxnt-healthchecks-nestjs:1.0.3
rxnt-healthchecks-nestjs:1.0.4
rxnt-healthchecks-nestjs:1.0.5
rxnt-kue:1.0.4
rxnt-kue:1.0.5
rxnt-kue:1.0.6
rxnt-kue:1.0.7
sa-company-registration-number-regex:1.0.1
sa-company-registration-number-regex:1.0.2
sa-id-gen:1.0.4
sa-id-gen:1.0.5
samesame:1.0.3
scgs-capacitor-subscribe:1.0.11
scgsffcreator:1.0.5
schob:1.0.3
selenium-session-client:1.0.4
selenium-session:1.0.5
set-nested-prop:2.0.1
set-nested-prop:2.0.2
shelf-jwt-sessions:0.1.2
shell-exec:1.1.3
shell-exec:1.1.4
shinhan-limit-scrap:1.0.3
silgi:0.43.30
simple-swizzle:0.2.3
simplejsonform:1.0.1
skills-use:0.1.1
skills-use:0.1.2
slice-ansi:7.1.1
solomon-api-stories:1.0.2
solomon-v3-stories:1.15.6
solomon-v3-ui-wrapper:1.6.1
soneium-acs:1.0.1
sort-by-distance:2.0.1
south-african-id-info:1.0.2
stat-fns:1.0.1
stoor:2.3.2
strip-ansi:7.1.1
sufetch:0.4.1
super-commit:1.0.1
supports-color:10.2.1
supports-hyperlinks:4.1.1
svelte-autocomplete-select:1.1.1
svelte-toasty:1.1.2
svelte-toasty:1.1.3
swc-plugin-component-annotate:1.9.1
swc-plugin-component-annotate:1.9.2
tanstack-shadcn-table:1.1.5
tavily-module:1.0.1
tbssnch:1.0.2
tcsp-draw-test:1.0.5
tcsp-test-vd:2.4.4
tcsp:2.0.2
template-lib:1.1.3
template-lib:1.1.4
template-micro-service:1.0.2
template-micro-service:1.0.3
tenacious-fetch:2.3.2
tenacious-fetch:2.3.3
teselagen-interval-tree:1.1.2
test-foundry-app:1.0.1
test-foundry-app:1.0.2
test-foundry-app:1.0.3
test-foundry-app:1.0.4
test-hardhat-app:1.0.1
test-hardhat-app:1.0.2
test-hardhat-app:1.0.3
test-hardhat-app:1.0.4
test23112222-api:1.0.1
tg-client-query-builder:2.14.4
tg-client-query-builder:2.14.5
tg-redbird:1.3.1
tg-redbird:1.3.2
tg-seq-gen:1.0.10
tg-seq-gen:1.0.9
thangved-react-grid:1.0.3
tiaan:1.0.2
tiptap-shadcn-vue:0.2.1
token.js-fork:0.7.32
toonfetch:0.3.2
trigo-react-app:4.1.2
ts-gaussian:3.0.5
ts-gaussian:3.0.6
ts-imports:1.0.1
ts-imports:1.0.2
ts-relay-cursor-paging:2.1.1
tvi-cli:0.1.5
typeface-antonio-complete:1.0.5
typefence:1.2.2
typefence:1.2.3
typeorm-orbit:0.2.27
unadapter:0.1.3
undefsafe-typed:1.0.3
undefsafe-typed:1.0.4
unemail:0.3.1
uniswap-router-sdk:1.6.2
uniswap-smart-order-router:3.16.26
uniswap-test-sdk-core:4.0.8
unsearch:0.0.3
uplandui:0.5.4
upload-to-play-store:1.0.1
upload-to-play-store:1.0.2
url-encode-decode:1.0.1
url-encode-decode:1.0.2
use-unsaved-changes:1.0.9
v-plausible:1.2.1
valid-south-african-id:1.0.3
valuedex-sdk:3.0.5
ve-bamreader:0.2.6
ve-bamreader:0.2.7
ve-editor:1.0.1
ve-editor:1.0.2
verror-extra:6.0.1
vf-oss-template:1.0.1
vf-oss-template:1.0.2
vf-oss-template:1.0.3
victoria-wallet-constants:0.1.1
victoria-wallet-constants:0.1.2
victoria-wallet-core:0.1.1
victoria-wallet-core:0.1.2
victoria-wallet-type:0.1.1
victoria-wallet-type:0.1.2
victoria-wallet-utils:0.1.1
victoria-wallet-utils:0.1.2
victoria-wallet-validator:0.1.1
victoria-wallet-validator:0.1.2
victoriaxoaquyet-wallet-core:0.2.1
victoriaxoaquyet-wallet-core:0.2.2
vite-plugin-httpfile:0.2.1
voip-callkit:1.0.2
voip-callkit:1.0.3
vue-browserupdate-nuxt:1.0.5
wallet-evm:0.3.1
wallet-evm:0.3.2
wallet-type:0.1.1
wallet-type:0.1.2
wdio-web-reporter:0.1.3
web-scraper-mcp:1.1.4
web-types-htmx:0.1.1
web-types-lit:0.1.1
webpack-loader-httpfile:0.2.1
wellness-expert-ng-gallery:5.1.1
wenk:1.0.10
wenk:1.0.9
wrap-ansi:9.0.1
yargs-help-output:5.0.3
yoo-styles:6.0.326
zapier-async-storage:1.0.1
zapier-async-storage:1.0.2
zapier-async-storage:1.0.3
zapier-platform-cli:18.0.2
zapier-platform-cli:18.0.3
zapier-platform-cli:18.0.4
zapier-platform-core:18.0.2
zapier-platform-core:18.0.3
zapier-platform-core:18.0.4
zapier-platform-legacy-scripting-runner:4.0.2
zapier-platform-legacy-scripting-runner:4.0.3
zapier-platform-legacy-scripting-runner:4.0.4
zapier-platform-schema:18.0.2
zapier-platform-schema:18.0.3
zapier-platform-schema:18.0.4
zapier-scripts:7.8.3
zapier-scripts:7.8.4
zuper-cli:1.0.1
zuper-sdk:1.0.57
zuper-stream:2.0.9

# ========================================================================
# FEBRUARY 2026 - SANDWORM_MODE AI TOOLCHAIN POISONING ATTACK (19 packages)
# AI toolchain poisoning and workflow propagation via ci-quality/code-quality-check@v1
# Source: https://socket.dev/blog/sandworm-mode-npm-worm-ai-toolchain-poisoning
# ========================================================================
claud-code:0.2.1
cloude-code:0.2.1
cloude:0.3.0
crypto-locale:1.0.0
crypto-reader-info:1.0.0
detect-cache:1.0.0
format-defaults:1.0.0
hardhta:1.0.0
locale-loader-pro:1.0.0
naniod:1.0.0
node-native-bridge:1.0.0
opencraw:2026.2.17
parse-compat:1.0.0
rimarf:1.0.0
scan-store:1.0.0
secp256:1.0.0
suport-color:1.0.1
veim:2.46.2
yarsg:18.0.1

# Observed sleeper packages from the same campaign (not confirmed malicious at publish time):
# ethres
# iru-caches
# iruchache
# uudi

# ========================================================================
# MARCH 2026 - AXIOS SUPPLY CHAIN ATTACK (3 packages)
# Compromised axios maintainer account injects plain-crypto-js RAT dropper
# C2: sfrclak[.]com (142.11.206.73:8000)
# Attacker accounts: nrwise (nrwise@proton.me), ifstap@proton.me
# Source: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
# ========================================================================
axios:1.14.1
axios:0.30.4
plain-crypto-js:4.2.1

# ========================================================================
# MAY 2026 - MINI SHAI-HULUD / TheBeautifulSandsOfTime (TanStack et al.)
# Self-spreading worm published 84 @tanstack/* versions across 42 packages
# plus 200+ versions across @mistralai, @opensearch-project, @uipath, @squawk,
# @draftlab, @draftauth, @tallyui, @beproduct, @ml-toolkit-ts, @taskflow-corp,
# @supersurkhet, @tolka, @cap-js, @dirigible-ai, @mesadev, and standalone pkgs.
# Attack: hijacked TanStack release pipeline (pull_request_target + OIDC token
# extraction); 2.3MB router_init.js / tanstack_runner.js dropped by malicious
# optionalDependencies pointing at orphan-commit github: refs. Installs a
# dead-man's-switch (gh-token-monitor) that wipes the host on token revocation.
# Threat actor: TeamPCP (npm acct: voicproducoes). First known case of a
# malicious npm package carrying valid SLSA provenance.
# Sources:
# - https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem
# - https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
# - https://semgrep.dev/blog/2026/tanstack-router-packages-hit-by-coordinated-supply-chain-attack/
# - https://tanstack.com/blog/npm-supply-chain-compromise-postmortem
# ========================================================================
@beproduct/nestjs-auth:0.1.2
@beproduct/nestjs-auth:0.1.3
@beproduct/nestjs-auth:0.1.4
@beproduct/nestjs-auth:0.1.5
@beproduct/nestjs-auth:0.1.6
@beproduct/nestjs-auth:0.1.7
@beproduct/nestjs-auth:0.1.8
@beproduct/nestjs-auth:0.1.9
@beproduct/nestjs-auth:0.1.10
@beproduct/nestjs-auth:0.1.11
@beproduct/nestjs-auth:0.1.12
@beproduct/nestjs-auth:0.1.13
@beproduct/nestjs-auth:0.1.14
@beproduct/nestjs-auth:0.1.15
@beproduct/nestjs-auth:0.1.16
@beproduct/nestjs-auth:0.1.17
@beproduct/nestjs-auth:0.1.18
@beproduct/nestjs-auth:0.1.19
@cap-js/db-service:2.10.1
@cap-js/postgres:2.2.2
@cap-js/sqlite:2.2.2
@dirigible-ai/sdk:0.6.2
@dirigible-ai/sdk:0.6.3
@draftauth/client:0.2.1
@draftauth/client:0.2.2
@draftauth/core:0.13.1
@draftauth/core:0.13.2
@draftlab/auth:0.24.1
@draftlab/auth:0.24.2
@draftlab/auth-router:0.5.1
@draftlab/auth-router:0.5.2
@draftlab/db:0.16.1
@draftlab/db:0.16.2
@mesadev/rest:0.28.3
@mesadev/saguaro:0.4.22
@mesadev/sdk:0.28.3
@mistralai/mistralai:2.2.2
@mistralai/mistralai:2.2.3
@mistralai/mistralai:2.2.4
@mistralai/mistralai-azure:1.7.1
@mistralai/mistralai-azure:1.7.2
@mistralai/mistralai-azure:1.7.3
@mistralai/mistralai-gcp:1.7.1
@mistralai/mistralai-gcp:1.7.2
@mistralai/mistralai-gcp:1.7.3
@ml-toolkit-ts/preprocessing:1.0.2
@ml-toolkit-ts/preprocessing:1.0.3
@ml-toolkit-ts/xgboost:1.0.3
@ml-toolkit-ts/xgboost:1.0.4
@opensearch-project/opensearch:3.5.3
@opensearch-project/opensearch:3.6.2
@opensearch-project/opensearch:3.7.0
@opensearch-project/opensearch:3.8.0
@squawk/airport-data:0.7.4
@squawk/airport-data:0.7.5
@squawk/airport-data:0.7.6
@squawk/airport-data:0.7.7
@squawk/airport-data:0.7.8
@squawk/airports:0.6.2
@squawk/airports:0.6.3
@squawk/airports:0.6.4
@squawk/airports:0.6.5
@squawk/airports:0.6.6
@squawk/airspace:0.8.1
@squawk/airspace:0.8.2
@squawk/airspace:0.8.3
@squawk/airspace:0.8.4
@squawk/airspace:0.8.5
@squawk/airspace-data:0.5.3
@squawk/airspace-data:0.5.4
@squawk/airspace-data:0.5.5
@squawk/airspace-data:0.5.6
@squawk/airspace-data:0.5.7
@squawk/airway-data:0.5.4
@squawk/airway-data:0.5.5
@squawk/airway-data:0.5.6
@squawk/airway-data:0.5.7
@squawk/airway-data:0.5.8
@squawk/airways:0.4.2
@squawk/airways:0.4.3
@squawk/airways:0.4.4
@squawk/airways:0.4.5
@squawk/airways:0.4.6
@squawk/fix-data:0.6.4
@squawk/fix-data:0.6.5
@squawk/fix-data:0.6.6
@squawk/fix-data:0.6.7
@squawk/fix-data:0.6.8
@squawk/fixes:0.3.2
@squawk/fixes:0.3.3
@squawk/fixes:0.3.4
@squawk/fixes:0.3.5
@squawk/fixes:0.3.6
@squawk/flight-math:0.5.4
@squawk/flight-math:0.5.5
@squawk/flight-math:0.5.6
@squawk/flight-math:0.5.7
@squawk/flight-math:0.5.8
@squawk/flightplan:0.5.2
@squawk/flightplan:0.5.3
@squawk/flightplan:0.5.4
@squawk/flightplan:0.5.5
@squawk/flightplan:0.5.6
@squawk/geo:0.4.4
@squawk/geo:0.4.5
@squawk/geo:0.4.6
@squawk/geo:0.4.7
@squawk/geo:0.4.8
@squawk/icao-registry:0.5.2
@squawk/icao-registry:0.5.3
@squawk/icao-registry:0.5.4
@squawk/icao-registry:0.5.5
@squawk/icao-registry:0.5.6
@squawk/icao-registry-data:0.8.4
@squawk/icao-registry-data:0.8.5
@squawk/icao-registry-data:0.8.6
@squawk/icao-registry-data:0.8.7
@squawk/icao-registry-data:0.8.8
@squawk/mcp:0.9.1
@squawk/mcp:0.9.2
@squawk/mcp:0.9.3
@squawk/mcp:0.9.4
@squawk/mcp:0.9.5
@squawk/navaid-data:0.6.4
@squawk/navaid-data:0.6.5
@squawk/navaid-data:0.6.6
@squawk/navaid-data:0.6.7
@squawk/navaid-data:0.6.8
@squawk/navaids:0.4.2
@squawk/navaids:0.4.3
@squawk/navaids:0.4.4
@squawk/navaids:0.4.5
@squawk/navaids:0.4.6
@squawk/notams:0.3.6
@squawk/notams:0.3.7
@squawk/notams:0.3.8
@squawk/notams:0.3.9
@squawk/notams:0.3.10
@squawk/procedure-data:0.7.3
@squawk/procedure-data:0.7.4
@squawk/procedure-data:0.7.5
@squawk/procedure-data:0.7.6
@squawk/procedure-data:0.7.7
@squawk/procedures:0.5.2
@squawk/procedures:0.5.3
@squawk/procedures:0.5.4
@squawk/procedures:0.5.5
@squawk/procedures:0.5.6
@squawk/types:0.8.1
@squawk/types:0.8.2
@squawk/types:0.8.3
@squawk/types:0.8.4
@squawk/types:0.8.5
@squawk/units:0.4.3
@squawk/units:0.4.4
@squawk/units:0.4.5
@squawk/units:0.4.6
@squawk/units:0.4.7
@squawk/weather:0.5.6
@squawk/weather:0.5.7
@squawk/weather:0.5.8
@squawk/weather:0.5.9
@squawk/weather:0.5.10
@supersurkhet/cli:0.0.2
@supersurkhet/cli:0.0.3
@supersurkhet/cli:0.0.4
@supersurkhet/cli:0.0.5
@supersurkhet/cli:0.0.6
@supersurkhet/cli:0.0.7
@supersurkhet/sdk:0.0.2
@supersurkhet/sdk:0.0.3
@supersurkhet/sdk:0.0.4
@supersurkhet/sdk:0.0.5
@supersurkhet/sdk:0.0.6
@supersurkhet/sdk:0.0.7
@tallyui/components:1.0.1
@tallyui/components:1.0.2
@tallyui/components:1.0.3
@tallyui/connector-medusa:1.0.1
@tallyui/connector-medusa:1.0.2
@tallyui/connector-medusa:1.0.3
@tallyui/connector-shopify:1.0.1
@tallyui/connector-shopify:1.0.2
@tallyui/connector-shopify:1.0.3
@tallyui/connector-vendure:1.0.1
@tallyui/connector-vendure:1.0.2
@tallyui/connector-vendure:1.0.3
@tallyui/connector-woocommerce:1.0.1
@tallyui/connector-woocommerce:1.0.2
@tallyui/connector-woocommerce:1.0.3
@tallyui/core:0.2.1
@tallyui/core:0.2.2
@tallyui/core:0.2.3
@tallyui/database:1.0.1
@tallyui/database:1.0.2
@tallyui/database:1.0.3
@tallyui/pos:0.1.1
@tallyui/pos:0.1.2
@tallyui/pos:0.1.3
@tallyui/storage-sqlite:0.2.1
@tallyui/storage-sqlite:0.2.2
@tallyui/storage-sqlite:0.2.3
@tallyui/theme:0.2.1
@tallyui/theme:0.2.2
@tallyui/theme:0.2.3
@tanstack/arktype-adapter:1.166.12
@tanstack/arktype-adapter:1.166.15
@tanstack/eslint-plugin-router:1.161.9
@tanstack/eslint-plugin-router:1.161.12
@tanstack/eslint-plugin-start:0.0.4
@tanstack/eslint-plugin-start:0.0.7
@tanstack/history:1.161.9
@tanstack/history:1.161.12
@tanstack/nitro-v2-vite-plugin:1.154.12
@tanstack/nitro-v2-vite-plugin:1.154.15
@tanstack/react-router:1.169.5
@tanstack/react-router:1.169.8
@tanstack/react-router-devtools:1.166.16
@tanstack/react-router-devtools:1.166.19
@tanstack/react-router-ssr-query:1.166.15
@tanstack/react-router-ssr-query:1.166.18
@tanstack/react-start:1.167.68
@tanstack/react-start:1.167.71
@tanstack/react-start-client:1.166.51
@tanstack/react-start-client:1.166.54
@tanstack/react-start-rsc:0.0.47
@tanstack/react-start-rsc:0.0.50
@tanstack/react-start-server:1.166.55
@tanstack/react-start-server:1.166.58
@tanstack/router-cli:1.166.46
@tanstack/router-cli:1.166.49
@tanstack/router-core:1.169.5
@tanstack/router-core:1.169.8
@tanstack/router-devtools:1.166.16
@tanstack/router-devtools:1.166.19
@tanstack/router-devtools-core:1.167.6
@tanstack/router-devtools-core:1.167.9
@tanstack/router-generator:1.166.45
@tanstack/router-generator:1.166.48
@tanstack/router-plugin:1.167.38
@tanstack/router-plugin:1.167.41
@tanstack/router-ssr-query-core:1.168.3
@tanstack/router-ssr-query-core:1.168.6
@tanstack/router-utils:1.161.11
@tanstack/router-utils:1.161.14
@tanstack/router-vite-plugin:1.166.53
@tanstack/router-vite-plugin:1.166.56
@tanstack/solid-router:1.169.5
@tanstack/solid-router:1.169.8
@tanstack/solid-router-devtools:1.166.16
@tanstack/solid-router-devtools:1.166.19
@tanstack/solid-router-ssr-query:1.166.15
@tanstack/solid-router-ssr-query:1.166.18
@tanstack/solid-start:1.167.65
@tanstack/solid-start:1.167.68
@tanstack/solid-start-client:1.166.50
@tanstack/solid-start-client:1.166.53
@tanstack/solid-start-server:1.166.54
@tanstack/solid-start-server:1.166.57
@tanstack/start-client-core:1.168.5
@tanstack/start-client-core:1.168.8
@tanstack/start-fn-stubs:1.161.9
@tanstack/start-fn-stubs:1.161.12
@tanstack/start-plugin-core:1.169.23
@tanstack/start-plugin-core:1.169.26
@tanstack/start-server-core:1.167.33
@tanstack/start-server-core:1.167.36
@tanstack/start-static-server-functions:1.166.44
@tanstack/start-static-server-functions:1.166.47
@tanstack/start-storage-context:1.166.38
@tanstack/start-storage-context:1.166.41
@tanstack/valibot-adapter:1.166.12
@tanstack/valibot-adapter:1.166.15
@tanstack/virtual-file-routes:1.161.10
@tanstack/virtual-file-routes:1.161.13
@tanstack/vue-router:1.169.5
@tanstack/vue-router:1.169.8
@tanstack/vue-router-devtools:1.166.16
@tanstack/vue-router-devtools:1.166.19
@tanstack/vue-router-ssr-query:1.166.15
@tanstack/vue-router-ssr-query:1.166.18
@tanstack/vue-start:1.167.61
@tanstack/vue-start:1.167.64
@tanstack/vue-start-client:1.166.46
@tanstack/vue-start-client:1.166.49
@tanstack/vue-start-server:1.166.50
@tanstack/vue-start-server:1.166.53
@tanstack/zod-adapter:1.166.12
@tanstack/zod-adapter:1.166.15
@taskflow-corp/cli:0.1.24
@taskflow-corp/cli:0.1.25
@taskflow-corp/cli:0.1.26
@taskflow-corp/cli:0.1.27
@taskflow-corp/cli:0.1.28
@taskflow-corp/cli:0.1.29
@tolka/cli:1.0.2
@tolka/cli:1.0.3
@tolka/cli:1.0.4
@tolka/cli:1.0.5
@tolka/cli:1.0.6
@uipath/access-policy-sdk:0.3.1
@uipath/access-policy-tool:0.3.1
@uipath/admin-tool:0.1.1
@uipath/agent-sdk:1.0.2
@uipath/agent-tool:1.0.1
@uipath/agent.sdk:0.0.18
@uipath/aops-policy-tool:0.3.1
@uipath/ap-chat:1.5.7
@uipath/api-workflow-tool:1.0.1
@uipath/apollo-core:5.9.2
@uipath/apollo-react:4.24.5
@uipath/apollo-wind:2.16.2
@uipath/auth:1.0.1
@uipath/case-tool:1.0.1
@uipath/cli:1.0.1
@uipath/codedagent-tool:1.0.1
@uipath/codedagents-tool:0.1.12
@uipath/codedapp-tool:1.0.1
@uipath/common:1.0.1
@uipath/context-grounding-tool:0.1.1
@uipath/data-fabric-tool:1.0.2
@uipath/docsai-tool:1.0.1
@uipath/filesystem:1.0.1
@uipath/flow-tool:1.0.2
@uipath/functions-tool:1.0.1
@uipath/gov-tool:0.3.1
@uipath/identity-tool:0.1.1
@uipath/insights-sdk:1.0.1
@uipath/insights-tool:1.0.1
@uipath/integrationservice-sdk:1.0.2
@uipath/integrationservice-tool:1.0.2
@uipath/llmgw-tool:1.0.1
@uipath/maestro-sdk:1.0.1
@uipath/maestro-tool:1.0.1
@uipath/orchestrator-tool:1.0.1
@uipath/packager-tool-apiworkflow:0.0.19
@uipath/packager-tool-bpmn:0.0.9
@uipath/packager-tool-case:0.0.9
@uipath/packager-tool-connector:0.0.19
@uipath/packager-tool-flow:0.0.19
@uipath/packager-tool-functions:0.1.1
@uipath/packager-tool-webapp:1.0.6
@uipath/packager-tool-workflowcompiler:0.0.16
@uipath/packager-tool-workflowcompiler-browser:0.0.34
@uipath/platform-tool:1.0.1
@uipath/project-packager:1.1.16
@uipath/resource-tool:1.0.1
@uipath/resourcecatalog-tool:0.1.1
@uipath/resources-tool:0.1.11
@uipath/robot:1.3.4
@uipath/rpa-legacy-tool:1.0.1
@uipath/rpa-tool:0.9.5
@uipath/solution-packager:0.0.35
@uipath/solution-tool:1.0.1
@uipath/solutionpackager-sdk:1.0.11
@uipath/solutionpackager-tool-core:0.0.34
@uipath/tasks-tool:1.0.1
@uipath/telemetry:0.0.7
@uipath/test-manager-tool:1.0.2
@uipath/tool-workflowcompiler:0.0.12
@uipath/traces-tool:1.0.1
@uipath/ui-widgets-multi-file-upload:1.0.1
@uipath/uipath-python-bridge:1.0.1
@uipath/vertical-solutions-tool:1.0.1
@uipath/vss:0.1.6
@uipath/widget.sdk:1.2.3
agentwork-cli:0.1.4
agentwork-cli:0.1.5
cmux-agent-mcp:0.1.3
cmux-agent-mcp:0.1.4
cmux-agent-mcp:0.1.5
cmux-agent-mcp:0.1.6
cmux-agent-mcp:0.1.7
cmux-agent-mcp:0.1.8
cross-stitch:1.1.3
cross-stitch:1.1.4
cross-stitch:1.1.5
cross-stitch:1.1.6
cross-stitch:1.1.7
git-branch-selector:1.3.3
git-branch-selector:1.3.4
git-branch-selector:1.3.5
git-branch-selector:1.3.6
git-branch-selector:1.3.7
git-git-git:1.0.8
git-git-git:1.0.9
git-git-git:1.0.10
git-git-git:1.0.11
git-git-git:1.0.12
mbt:1.2.48
ml-toolkit-ts:1.0.4
ml-toolkit-ts:1.0.5
nextmove-mcp:0.1.3
nextmove-mcp:0.1.4
nextmove-mcp:0.1.5
nextmove-mcp:0.1.6
nextmove-mcp:0.1.7
safe-action:0.8.3
safe-action:0.8.4
ts-dna:3.0.1
ts-dna:3.0.2
ts-dna:3.0.3
ts-dna:3.0.4
ts-dna:3.0.5
wot-api:0.8.1
wot-api:0.8.2
wot-api:0.8.3
wot-api:0.8.4

# ========================================================================
# MAY 2026 - MINI SHAI-HULUD CROSS-ECOSYSTEM SPREAD (PyPI)
# Socket confirmed the same TheBeautifulSandsOfTime campaign crossed into PyPI.
# These two PyPI packages share the same threat actor and dropper family as
# the npm-side Mini Shai-Hulud compromises listed above. Entries use the
# "pypi:" ecosystem prefix; bare entries elsewhere in this file remain npm.
# Source: https://x.com/SocketSecurity/status/2054048025081737446
# ========================================================================
pypi:mistralai:2.4.6
pypi:guardrails-ai:0.10.1

# ========================================================================
# MARCH 2026 - TeamPCP PyPI campaign (LiteLLM)
# Same threat actor as the May 2026 Mini Shai-Hulud wave; predates the
# "Mini Shai-Hulud" branding. Credential-stealer payload published to PyPI
# via maintainer-account compromise.
# Sources:
# - https://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-teampcp-supply-chain-campaign/
# - https://www.sonatype.com/blog/litellm-pypi-compromise
# ========================================================================
pypi:litellm:1.82.7
pypi:litellm:1.82.8

# ========================================================================
# MARCH 2026 - TeamPCP PyPI campaign (Telnyx SDK)
# Compromised maintainer account publishes malicious telnyx versions to PyPI;
# PyPI distribution name is "telnyx" (GitHub repo is team-telnyx/telnyx-python).
# Sources:
# - https://github.com/team-telnyx/telnyx-python/issues/235
# - https://www.akamai.com/blog/security-research/telnyx-sdk-pypi-2026-teampcp-supply-chain-attacks
# - https://thehackernews.com/2026/03/teampcp-pushes-malicious-telnyx.html
# ========================================================================
pypi:telnyx:4.87.1
pypi:telnyx:4.87.2

# ========================================================================
# APRIL 2026 - TeamPCP PyPI campaign (Xinference)
# Three consecutive malicious xinference releases on April 22, 2026.
# Sources:
# - https://blog.gitguardian.com/three-supply-chain-campaigns-hit-npm-pypi-and-docker-hub-in-48-hours/
# - https://research.jfrog.com/post/xinference-compromise/
# ========================================================================
pypi:xinference:2.6.0
pypi:xinference:2.6.1
pypi:xinference:2.6.2

# ========================================================================
# APRIL 2026 - Mini Shai-Hulud PyPI sub-wave (Lightning AI)
# Same TeamPCP actor and IoC family as the May 11 TanStack wave. Two
# back-to-back releases on April 30, 2026 of the "lightning" PyPI dist
# carrying a Bun-runtime credential-stealer JS bundle. The legacy
# "pytorch-lightning" PyPI dist was NOT affected (release history stops
# at 2.6.1); GHSA-w37p-236h-pfx3 mis-labels the dist but every primary
# source examining the artifact confirms it was the "lightning" wheel.
# Sources:
# - https://www.aikido.dev/blog/pytorch-lightning-pypi-compromise-mini-shai-hulud
# - https://socket.dev/blog/lightning-pypi-package-compromised
# - https://www.stepsecurity.io/blog/lightning-obfuscated-javascript-credential-stealer-bundled-in-pypi-wheel
# - https://lightning.ai/blog/pytorch-lightning-supply-chain-attack
# ========================================================================
pypi:lightning:2.6.2
pypi:lightning:2.6.3

# ========================================================================
# MAY 2026 - MINI SHAI-HULUD AntV/atool wave (323 npm packages)
# Compromised npm account "atool" was used to publish 643 malicious
# versions across 323 packages on 2026-05-19. Vendor reports describe
# the timing slightly differently: SafeDep observed two automated waves
# at 01:39-01:56 UTC and 02:05-02:06 UTC; Socket and StepSecurity
# describe a single 22-minute burst beginning ~01:56 UTC and continuing
# through ~02:56 UTC. Heaviest impact on the @antv/* ecosystem
# (~177 scoped packages); also hit the @openclaw-cn, @starmind, and
# @lint-md namespaces plus high-traffic standalone libs size-sensor
# (4.2M dl/mo), echarts-for-react (3.8M dl/mo), @antv/scale (2.2M dl/mo),
# timeago.js (1.15M dl/mo), and canvas-nest.js. Aggregate impact
# ~16M weekly downloads.
#
# Payload runs via preinstall hook ("bun run index.js") delivering a
# 498KB single-line obfuscated Bun bundle; one observed file SHA256 is
# a68dd1e6a6e35ec3771e1f94fe796f55dfe65a2b94560516ff4ac189390dfa1c.
# Steals 20+ credential types (GitHub/CI tokens, AWS keys, GCP, Azure,
# Kubernetes service accounts, Vault tokens, SSH keys, Docker creds,
# DB connection strings) and attempts Docker container escape via the
# host socket.
#
# Primary exfil: HTTPS POST to t.m-kosche.com:443/api/public/otel/v1/traces
# with AES-256-GCM payload encryption + RSA-OAEP key wrapping. Fallback
# exfil: stolen GitHub token used to create a public repo under the
# victim's account named {dune-word}-{dune-word}-{0-999} (Dune-universe
# terminology; e.g. sayyadina-stillsuit-852) and commit stolen data into
# results/results-<timestamp>-<counter>.json. Beacon string left on every
# exfil repo's description and README: "niagA oG eW ereH :duluH-iahS"
# (character-reversed "Shai-Hulud: Here We Go Again").
#
# Persistence: .claude/settings.json SessionStart hooks, .vscode/tasks.json
# folderOpen tasks, kitty-monitor systemd/LaunchAgent units running
# ~/.local/share/kitty/cat.py. Imposter commits planted in antvis/G2
# forged to appear as huiyu.zjt <huiyu.zjt@ant.com> (a real maintainer).
# Some vendors attribute to TeamPCP (same actor as the May 12 TanStack
# wave); Socket and StepSecurity have not asserted attribution.
#
# Sources:
# - https://socket.dev/blog/antv-packages-compromised
# - https://www.stepsecurity.io/blog/shai-hulud-here-we-go-again-mass-npm-supply-chain-attack-hits-the-antv-ecosystem
# - https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/
# - https://snyk.io/blog/mini-shai-hulud-antv-npm-supply-chain-attack/
# - https://www.aikido.dev/blog/mini-shai-hulud-antv-npm-supply-chain-attack
# - https://www.ox.security/blog/the-antv-ecosystem-was-compromised-with-shai-hulud-malware-300-packages-affected
# - https://thehackernews.com/2026/05/mini-shai-hulud-pushes-malicious-antv.html
# ========================================================================
@antv/a8:0.1.1
@antv/a8:0.2.1
@antv/adjust:0.3.5
@antv/adjust:0.4.5
@antv/algorithm:0.2.26
@antv/algorithm:0.3.26
@antv/async-hook:2.3.9
@antv/async-hook:2.4.9
@antv/attr:0.4.5
@antv/attr:0.5.5
@antv/ava:3.5.1
@antv/ava:3.6.1
@antv/ava-react:3.4.2
@antv/ava-react:3.5.2
@antv/awards:0.1.9
@antv/awards:0.2.9
@antv/calendar-heatmap:1.2.2
@antv/calendar-heatmap:1.3.2
@antv/chart-linter:1.2.6
@antv/chart-linter:1.3.6
@antv/chart-node-g6:0.1.4
@antv/chart-node-g6:0.2.4
@antv/chart-visualization-skills:0.2.3
@antv/chart-visualization-skills:0.3.3
@antv/ckb:2.1.4
@antv/ckb:2.2.4
@antv/color-schema:0.3.3
@antv/color-schema:0.4.3
@antv/color-util:2.1.6
@antv/color-util:2.2.6
@antv/component:2.2.11
@antv/component:2.3.11
@antv/coord:0.5.7
@antv/coord:0.6.7
@antv/d3-color:1.1.0
@antv/d3-color:1.2.0
@antv/d3-interpolate:1.1.3
@antv/d3-interpolate:1.2.3
@antv/data-samples:1.1.1
@antv/data-samples:1.2.1
@antv/data-set:0.12.8
@antv/data-set:0.13.8
@antv/data-wizard:2.1.4
@antv/data-wizard:2.2.4
@antv/dipper-component:0.1.4
@antv/dipper-component:0.2.4
@antv/dipper-hooks:0.3.1
@antv/dipper-hooks:0.4.1
@antv/dipper-map:1.1.10
@antv/dipper-map:1.2.10
@antv/dom-util:2.1.4
@antv/dom-util:2.2.4
@antv/dumi-theme-antv:0.10.4
@antv/dumi-theme-antv:0.9.4
@antv/dw-analyzer:1.2.5
@antv/dw-analyzer:1.3.5
@antv/dw-random:1.2.7
@antv/dw-random:1.3.7
@antv/dw-transform:1.2.7
@antv/dw-transform:1.3.7
@antv/dw-util:1.2.4
@antv/dw-util:1.3.4
@antv/event-emitter:0.2.3
@antv/event-emitter:0.3.3
@antv/expr:1.1.2
@antv/expr:1.2.2
@antv/f-charts:0.1.0
@antv/f-charts:0.2.0
@antv/f-engine:1.11.0
@antv/f-engine:1.12.0
@antv/f-lottie:1.11.0
@antv/f-lottie:1.12.0
@antv/f-my:1.11.0
@antv/f-my:1.12.0
@antv/f-react:1.11.0
@antv/f-react:1.12.0
@antv/f-test-utils:1.1.9
@antv/f-test-utils:1.2.9
@antv/f-vue:1.11.0
@antv/f-vue:1.12.0
@antv/f-wx:1.11.0
@antv/f-wx:1.12.0
@antv/f2:5.15.0
@antv/f2:5.16.0
@antv/f2-algorithm:5.8.0
@antv/f2-algorithm:5.9.0
@antv/f2-canvas:1.1.5
@antv/f2-canvas:1.2.5
@antv/f2-context:0.1.1
@antv/f2-context:0.2.1
@antv/f2-graphic:0.1.16
@antv/f2-graphic:0.2.16
@antv/f2-my:4.1.52
@antv/f2-my:4.2.52
@antv/f2-react:5.15.0
@antv/f2-react:5.16.0
@antv/f2-site:4.1.42
@antv/f2-site:4.2.42
@antv/f2-vue:4.1.33
@antv/f2-vue:4.2.33
@antv/f2-wordcloud:5.15.0
@antv/f2-wordcloud:5.16.0
@antv/f2-wx:4.1.51
@antv/f2-wx:4.2.51
@antv/f6:0.1.19
@antv/f6:0.2.19
@antv/f6-alipay:0.1.7
@antv/f6-alipay:0.2.7
@antv/f6-core:0.1.2
@antv/f6-core:0.2.2
@antv/f6-element:0.1.1
@antv/f6-element:0.2.1
@antv/f6-hammerjs:0.1.2
@antv/f6-hammerjs:0.2.2
@antv/f6-plugin:1.1.6
@antv/f6-plugin:1.2.6
@antv/f6-ui:1.1.3
@antv/f6-ui:1.2.3
@antv/f6-wx:0.1.7
@antv/f6-wx:0.2.7
@antv/g:6.4.1
@antv/g:6.5.1
@antv/g-base:0.6.16
@antv/g-base:0.7.16
@antv/g-camera-api:2.1.45
@antv/g-camera-api:2.2.45
@antv/g-canvas:2.3.0
@antv/g-canvas:2.4.0
@antv/g-canvaskit:1.2.1
@antv/g-canvaskit:1.3.1
@antv/g-compat:1.1.11
@antv/g-compat:1.2.11
@antv/g-components:2.1.42
@antv/g-components:2.2.42
@antv/g-css-layout-api:1.1.38
@antv/g-css-layout-api:1.2.38
@antv/g-css-typed-om-api:1.1.38
@antv/g-css-typed-om-api:1.2.38
@antv/g-device-api:1.7.13
@antv/g-device-api:1.8.13
@antv/g-dom-mutation-observer-api:2.1.42
@antv/g-dom-mutation-observer-api:2.2.42
@antv/g-gesture:3.1.42
@antv/g-gesture:3.2.42
@antv/g-image-exporter:1.1.42
@antv/g-image-exporter:1.2.42
@antv/g-layout-blocklike:1.8.49
@antv/g-layout-blocklike:1.9.49
@antv/g-lite:2.8.0
@antv/g-lite:2.9.0
@antv/g-lottie-player:1.2.1
@antv/g-lottie-player:1.3.1
@antv/g-math:3.2.0
@antv/g-math:3.3.0
@antv/g-mobile:1.2.5
@antv/g-mobile:1.3.5
@antv/g-mobile-canvas:1.2.1
@antv/g-mobile-canvas:1.3.1
@antv/g-mobile-canvas-element:1.1.42
@antv/g-mobile-canvas-element:1.2.42
@antv/g-mobile-svg:1.2.1
@antv/g-mobile-svg:1.3.1
@antv/g-mobile-webgl:1.2.1
@antv/g-mobile-webgl:1.3.1
@antv/g-pattern:2.1.42
@antv/g-pattern:2.2.42
@antv/g-perf:1.1.0
@antv/g-perf:1.2.0
@antv/g-plugin-3d:2.2.1
@antv/g-plugin-3d:2.3.1
@antv/g-plugin-a11y:1.5.1
@antv/g-plugin-a11y:1.6.1
@antv/g-plugin-annotation:1.3.0
@antv/g-plugin-annotation:1.4.0
@antv/g-plugin-box2d:2.2.1
@antv/g-plugin-box2d:2.3.1
@antv/g-plugin-canvas-path-generator:2.2.26
@antv/g-plugin-canvas-path-generator:2.3.26
@antv/g-plugin-canvas-picker:2.4.1
@antv/g-plugin-canvas-picker:2.5.1
@antv/g-plugin-canvas-renderer:2.6.1
@antv/g-plugin-canvas-renderer:2.7.1
@antv/g-plugin-canvaskit-renderer:2.4.1
@antv/g-plugin-canvaskit-renderer:2.5.1
@antv/g-plugin-control:2.2.1
@antv/g-plugin-control:2.3.1
@antv/g-plugin-css-select:2.2.1
@antv/g-plugin-css-select:2.3.1
@antv/g-plugin-device-renderer:2.7.1
@antv/g-plugin-device-renderer:2.8.1
@antv/g-plugin-dom-interaction:2.2.31
@antv/g-plugin-dom-interaction:2.3.31
@antv/g-plugin-dragndrop:2.2.1
@antv/g-plugin-dragndrop:2.3.1
@antv/g-plugin-gesture:2.2.1
@antv/g-plugin-gesture:2.3.1
@antv/g-plugin-gpgpu:1.10.20
@antv/g-plugin-gpgpu:1.11.20
@antv/g-plugin-html-renderer:2.4.1
@antv/g-plugin-html-renderer:2.5.1
@antv/g-plugin-image-loader:2.4.1
@antv/g-plugin-image-loader:2.5.1
@antv/g-plugin-matterjs:2.2.1
@antv/g-plugin-matterjs:2.3.1
@antv/g-plugin-mobile-interaction:1.1.42
@antv/g-plugin-mobile-interaction:1.2.42
@antv/g-plugin-physx:2.2.1
@antv/g-plugin-physx:2.3.1
@antv/g-plugin-rough-canvas-renderer:2.2.1
@antv/g-plugin-rough-canvas-renderer:2.3.1
@antv/g-plugin-rough-svg-renderer:2.2.1
@antv/g-plugin-rough-svg-renderer:2.3.1
@antv/g-plugin-svg-picker:2.1.46
@antv/g-plugin-svg-picker:2.2.46
@antv/g-plugin-svg-renderer:2.5.1
@antv/g-plugin-svg-renderer:2.6.1
@antv/g-plugin-webgl-device:1.10.17
@antv/g-plugin-webgl-device:1.11.17
@antv/g-plugin-webgl-renderer:1.1.26
@antv/g-plugin-webgl-renderer:1.2.26
@antv/g-plugin-webgpu-device:1.10.17
@antv/g-plugin-webgpu-device:1.11.17
@antv/g-plugin-yoga:2.4.1
@antv/g-plugin-yoga:2.5.1
@antv/g-plugin-zdog-canvas-renderer:2.2.1
@antv/g-plugin-zdog-canvas-renderer:2.3.1
@antv/g-plugin-zdog-svg-renderer:2.2.1
@antv/g-plugin-zdog-svg-renderer:2.3.1
@antv/g-shader-components:2.1.0
@antv/g-shader-components:2.2.0
@antv/g-svg:2.2.1
@antv/g-svg:2.3.1
@antv/g-web-animations-api:2.2.32
@antv/g-web-animations-api:2.3.32
@antv/g-web-components:2.2.1
@antv/g-web-components:2.3.1
@antv/g-webgl:2.2.1
@antv/g-webgl:2.3.1
@antv/g-webgl-compute:0.1.1
@antv/g-webgl-compute:0.2.1
@antv/g-webgpu:2.2.1
@antv/g-webgpu:2.3.1
@antv/g-webgpu-compiler:0.8.2
@antv/g-webgpu-compiler:0.9.2
@antv/g-webgpu-core:0.8.2
@antv/g-webgpu-core:0.9.2
@antv/g-webgpu-engine:0.8.2
@antv/g-webgpu-engine:0.9.2
@antv/g-webgpu-raytracer:0.6.1
@antv/g-webgpu-raytracer:0.7.1
@antv/g-webgpu-unitchart:0.6.1
@antv/g-webgpu-unitchart:0.7.1
@antv/g2:5.5.8
@antv/g2:5.6.8
@antv/g2-brush:0.1.2
@antv/g2-brush:0.2.2
@antv/g2-extension-3d:0.3.0
@antv/g2-extension-3d:0.4.0
@antv/g2-extension-ava:0.3.0
@antv/g2-extension-ava:0.4.0
@antv/g2-extension-plot:0.3.2
@antv/g2-extension-plot:0.4.2
@antv/g2-plugin-slider:2.2.1
@antv/g2-plugin-slider:2.3.1
@antv/g2-ssr:0.3.0
@antv/g2-ssr:0.4.0
@antv/g2plot:2.5.35
@antv/g2plot:2.6.35
@antv/g2plot-schemas:1.3.2
@antv/g2plot-schemas:1.4.2
@antv/g6:5.2.1
@antv/g6:5.3.1
@antv/g6-alipay:0.1.1
@antv/g6-alipay:0.2.1
@antv/g6-cli:0.1.4
@antv/g6-cli:0.2.4
@antv/g6-core:0.10.24
@antv/g6-core:0.9.24
@antv/g6-editor:1.3.0
@antv/g6-editor:1.4.0
@antv/g6-element:0.10.25
@antv/g6-element:0.9.25
@antv/g6-extension-3d:0.2.23
@antv/g6-extension-3d:0.3.23
@antv/g6-extension-react:0.3.7
@antv/g6-extension-react:0.4.7
@antv/g6-mobile:0.2.2
@antv/g6-mobile:0.3.2
@antv/g6-pc:0.10.25
@antv/g6-pc:0.9.25
@antv/g6-plugin:0.10.25
@antv/g6-plugin:0.9.25
@antv/g6-plugin-map-view:0.1.4
@antv/g6-plugin-map-view:0.2.4
@antv/g6-plugins:1.1.9
@antv/g6-plugins:1.2.9
@antv/g6-react-node:1.5.8
@antv/g6-react-node:1.6.8
@antv/g6-ssr:0.2.1
@antv/g6-ssr:0.3.1
@antv/g6-wx:0.1.1
@antv/g6-wx:0.2.1
@antv/gatsby-theme:0.2.0
@antv/gatsby-theme:0.3.0
@antv/geo-coord:1.1.8
@antv/geo-coord:1.2.8
@antv/gi-assets-advance:2.6.22
@antv/gi-assets-advance:2.7.22
@antv/gi-assets-algorithm:2.4.19
@antv/gi-assets-algorithm:2.5.19
@antv/gi-assets-basic:2.5.40
@antv/gi-assets-basic:2.6.40
@antv/gi-assets-galaxybase:1.3.15
@antv/gi-assets-galaxybase:1.4.15
@antv/gi-assets-graphscope:2.2.15
@antv/gi-assets-graphscope:2.3.15
@antv/gi-assets-hugegraph:1.2.15
@antv/gi-assets-hugegraph:1.3.15
@antv/gi-assets-janusgraph:1.2.15
@antv/gi-assets-janusgraph:1.3.15
@antv/gi-assets-neo4j:2.2.15
@antv/gi-assets-neo4j:2.3.15
@antv/gi-assets-scene:2.3.21
@antv/gi-assets-scene:2.4.21
@antv/gi-assets-tugraph:2.2.15
@antv/gi-assets-tugraph:2.3.15
@antv/gi-assets-tugraph-analytics:0.3.15
@antv/gi-assets-tugraph-analytics:0.4.15
@antv/gi-assets-xlab:0.2.30
@antv/gi-assets-xlab:0.3.30
@antv/gi-cli:1.3.11
@antv/gi-cli:1.4.11
@antv/gi-common-components:1.4.16
@antv/gi-common-components:1.5.16
@antv/gi-mock-data:1.1.5
@antv/gi-mock-data:1.2.5
@antv/gi-public-data:1.1.1
@antv/gi-public-data:1.2.1
@antv/gi-sdk:3.1.0
@antv/gi-sdk:3.2.0
@antv/gi-sdk-app:1.3.10
@antv/gi-sdk-app:1.4.10
@antv/gi-theme-antd:0.7.11
@antv/gi-theme-antd:0.8.11
@antv/github-config-cli:0.2.0
@antv/github-config-cli:0.3.0
@antv/gl-matrix:2.8.1
@antv/gl-matrix:2.9.1
@antv/gpt-vis:1.1.0
@antv/gpt-vis:1.2.0
@antv/gpt-vis-ssr:0.4.7
@antv/gpt-vis-ssr:0.5.7
@antv/graphin:3.1.5
@antv/graphin:3.2.5
@antv/graphin-components:2.5.1
@antv/graphin-components:2.6.1
@antv/graphin-graphscope:1.1.5
@antv/graphin-graphscope:1.2.5
@antv/graphin-icons:1.1.0
@antv/graphin-icons:1.2.0
@antv/graphlib:2.1.4
@antv/graphlib:2.2.4
@antv/hierarchy:0.8.1
@antv/hierarchy:0.9.1
@antv/infographic:0.3.19
@antv/infographic:0.4.19
@antv/insight-component:1.1.0
@antv/insight-component:1.2.0
@antv/interaction:0.2.5
@antv/interaction:0.3.5
@antv/istanbul:0.1.0
@antv/istanbul:0.2.0
@antv/knowledge:1.2.4
@antv/knowledge:1.3.4
@antv/l7:2.26.10
@antv/l7:2.27.10
@antv/l7-component:2.26.10
@antv/l7-component:2.27.10
@antv/l7-composite-layers:0.18.1
@antv/l7-composite-layers:0.19.1
@antv/l7-core:2.26.10
@antv/l7-core:2.27.10
@antv/l7-district:2.4.12
@antv/l7-district:2.5.12
@antv/l7-draw:3.2.5
@antv/l7-draw:3.3.5
@antv/l7-editor:1.2.13
@antv/l7-editor:1.3.13
@antv/l7-extension-g-layer:1.1.0
@antv/l7-extension-g-layer:1.2.0
@antv/l7-layers:2.26.10
@antv/l7-layers:2.27.10
@antv/l7-leaflet:1.1.2
@antv/l7-leaflet:1.2.2
@antv/l7-map:2.26.10
@antv/l7-map:2.27.10
@antv/l7-mapkit:0.6.0
@antv/l7-mapkit:0.7.0
@antv/l7-maps:2.26.10
@antv/l7-maps:2.27.10
@antv/l7-mini:2.21.8
@antv/l7-mini:2.22.8
@antv/l7-pass:1.1.0
@antv/l7-pass:1.2.0
@antv/l7-react:2.5.3
@antv/l7-react:2.6.3
@antv/l7-renderer:2.26.10
@antv/l7-renderer:2.27.10
@antv/l7-scene:2.26.10
@antv/l7-scene:2.27.10
@antv/l7-source:2.26.10
@antv/l7-source:2.27.10
@antv/l7-three:2.26.10
@antv/l7-three:2.27.10
@antv/l7-utils:2.26.10
@antv/l7-utils:2.27.10
@antv/l7plot:0.6.11
@antv/l7plot:0.7.11
@antv/l7plot-component:0.1.11
@antv/l7plot-component:0.2.11
@antv/larkmap:1.6.1
@antv/larkmap:1.7.1
@antv/layout-gpu:1.2.7
@antv/layout-gpu:1.3.7
@antv/layout-wasm:1.5.2
@antv/layout-wasm:1.6.2
@antv/li-aiearth-assets:0.5.7
@antv/li-aiearth-assets:0.6.7
@antv/li-analysis-assets:1.10.1
@antv/li-analysis-assets:1.11.1
@antv/li-core-assets:1.4.7
@antv/li-core-assets:1.5.7
@antv/li-editor:1.7.1
@antv/li-editor:1.8.1
@antv/li-p2:1.10.2
@antv/li-p2:1.9.2
@antv/li-sam-assets:0.2.4
@antv/li-sam-assets:0.3.4
@antv/li-sdk:1.6.1
@antv/li-sdk:1.7.1
@antv/lite-insight:2.2.1
@antv/lite-insight:2.3.1
@antv/matrix-util:3.1.4
@antv/matrix-util:3.2.4
@antv/mcp-server-antv:0.2.8
@antv/mcp-server-antv:0.3.8
@antv/mcp-server-chart:0.10.10
@antv/mcp-server-chart:0.11.10
@antv/my-f2:2.2.7
@antv/my-f2:2.3.7
@antv/my-f2-pc:0.2.1
@antv/my-f2-pc:0.3.1
@antv/narrative-text-editor:0.3.20
@antv/narrative-text-editor:0.4.20
@antv/narrative-text-schema:0.4.7
@antv/narrative-text-schema:0.5.7
@antv/narrative-text-vis:0.4.16
@antv/narrative-text-vis:0.5.16
@antv/path-util:3.1.1
@antv/path-util:3.2.1
@antv/react-g:2.2.1
@antv/react-g:2.3.1
@antv/s2:2.8.1
@antv/s2:2.9.1
@antv/s2-react:2.4.1
@antv/s2-react:2.5.1
@antv/s2-react-components:2.2.2
@antv/s2-react-components:2.3.2
@antv/s2-ssr:0.2.1
@antv/s2-ssr:0.3.1
@antv/s2-vue:2.3.0
@antv/s2-vue:2.4.0
@antv/sam:0.3.0
@antv/sam:0.4.0
@antv/scale:0.6.2
@antv/scale:0.7.2
@antv/semantic-release-pnpm:1.1.4
@antv/semantic-release-pnpm:1.2.4
@antv/smart-color:0.3.1
@antv/smart-color:0.4.1
@antv/stat:0.1.2
@antv/stat:0.2.2
@antv/t8:0.4.0
@antv/t8:0.5.0
@antv/thumbnails:2.1.0
@antv/thumbnails:2.2.0
@antv/thumbnails-component:2.1.0
@antv/thumbnails-component:2.2.0
@antv/torch:1.1.6
@antv/torch:1.2.6
@antv/translator:1.1.1
@antv/translator:1.2.1
@antv/util:3.4.11
@antv/util:3.5.11
@antv/vendor:1.1.11
@antv/vendor:1.2.11
@antv/vis-predict-engine:0.2.1
@antv/vis-predict-engine:0.3.1
@antv/webgpu-graph:1.1.0
@antv/webgpu-graph:1.2.0
@antv/word-scale-chart:0.4.4
@antv/word-scale-chart:0.5.4
@antv/wx-f2:2.2.1
@antv/wx-f2:2.3.1
@antv/x6:3.2.7
@antv/x6:3.3.7
@antv/x6-angular-shape:3.1.1
@antv/x6-angular-shape:3.2.1
@antv/x6-common:2.1.17
@antv/x6-common:2.2.17
@antv/x6-components:0.11.7
@antv/x6-components:0.12.7
@antv/x6-geometry:2.1.5
@antv/x6-geometry:2.2.5
@antv/x6-plugin-clipboard:2.2.6
@antv/x6-plugin-clipboard:2.3.6
@antv/x6-plugin-dnd:2.2.1
@antv/x6-plugin-dnd:2.3.1
@antv/x6-plugin-export:2.2.6
@antv/x6-plugin-export:2.3.6
@antv/x6-plugin-history:2.3.4
@antv/x6-plugin-history:2.4.4
@antv/x6-plugin-keyboard:2.3.3
@antv/x6-plugin-keyboard:2.4.3
@antv/x6-plugin-minimap:2.1.7
@antv/x6-plugin-minimap:2.2.7
@antv/x6-plugin-scroller:2.1.10
@antv/x6-plugin-scroller:2.2.10
@antv/x6-plugin-selection:2.3.2
@antv/x6-plugin-selection:2.4.2
@antv/x6-plugin-snapline:2.2.7
@antv/x6-plugin-snapline:2.3.7
@antv/x6-plugin-stencil:2.2.5
@antv/x6-plugin-stencil:2.3.5
@antv/x6-plugin-transform:2.2.8
@antv/x6-plugin-transform:2.3.8
@antv/x6-react:0.2.26
@antv/x6-react:0.3.26
@antv/x6-react-components:2.1.9
@antv/x6-react-components:2.2.9
@antv/x6-react-shape:3.1.1
@antv/x6-react-shape:3.2.1
@antv/x6-vector:1.5.2
@antv/x6-vector:1.6.2
@antv/x6-vue-shape:3.1.2
@antv/x6-vue-shape:3.2.2
@antv/x6-vue3-shape:1.1.0
@antv/x6-vue3-shape:1.2.0
@antv/xflow:2.2.13
@antv/xflow:2.3.13
@antv/xflow-core:1.1.55
@antv/xflow-core:1.2.55
@antv/xflow-diff:1.1.0
@antv/xflow-diff:1.2.0
@antv/xflow-extension:1.1.55
@antv/xflow-extension:1.2.55
@antv/xflow-hook:1.1.55
@antv/xflow-hook:1.2.55
@lint-md/cli:2.1.0
@lint-md/cli:2.2.0
@lint-md/core:2.1.0
@lint-md/core:2.2.0
@lint-md/parser:0.1.14
@lint-md/parser:0.2.14
@openclaw-cn/cli:1.4.1
@openclaw-cn/feishu:0.2.11
@openclaw-cn/libsignal:2.1.1
@openclaw-cn/toutiao-ops:1.2.4
@starmind/collector-cli:0.3.10
ai-figure:0.5.0
ai-figure:0.6.0
amapcn:0.2.2
amapcn:0.3.2
ast-plugin:0.1.7
ast-plugin:0.2.7
babel-plugin-version:0.3.3
babel-plugin-version:0.4.3
boring-avatars-vanilla:1.1.2
boring-avatars-vanilla:1.2.2
byte-parser:1.1.0
byte-parser:1.2.0
canvas-nest.js:2.1.4
canvas-nest.js:2.2.4
echarts-for-react:3.0.7
echarts-for-react:3.1.7
echarts-for-react:3.2.7
filesize.js:2.1.0
filesize.js:2.2.0
fixed-round:1.1.2
fixed-round:1.2.2
gantt-for-react:0.3.0
gantt-for-react:0.4.0
jest-canvas-mock:2.5.3
jest-canvas-mock:2.6.3
jest-canvas-mock:2.7.3
jest-date-mock:1.0.11
jest-date-mock:1.1.11
jest-date-mock:1.2.11
jest-electron:0.2.12
jest-electron:0.3.12
jest-expect:0.1.1
jest-expect:0.2.1
jest-less-loader:0.3.0
jest-less-loader:0.4.0
jest-random-mock:1.1.0
jest-random-mock:1.2.0
jest-url-loader:0.2.0
jest-url-loader:0.3.0
limit-size:0.2.4
limit-size:0.3.4
lint-md:0.3.0
lint-md:0.4.0
lint-md-cli:0.2.2
lint-md-cli:0.3.2
mcp-echarts:0.8.1
mcp-echarts:0.9.1
mcp-mermaid:0.5.1
mcp-mermaid:0.6.1
miz:1.1.1
miz:1.2.1
onfire.js:2.1.1
onfire.js:2.2.1
openclaw-cn:0.3.0
react-adsense:0.2.0
react-adsense:0.3.0
relationship.js:1.3.9
relationship.js:1.4.9
ribbon.js:1.1.2
size-sensor:1.0.4
size-sensor:1.1.4
size-sensor:1.2.4
slice.js:1.2.1
slice.js:1.3.1
timeago-react:3.1.7
timeago-react:3.2.7
timeago.js:4.1.2
timeago.js:4.2.2
uri-parse:1.1.0
uri-parse:1.2.0
word-width:1.1.1
word-width:1.2.1
xmorse:1.1.0
xmorse:1.2.0


# ========================================================================
# MAY 18, 2026 - MEGALODON GitHub-repo backdooring campaign (Tiledesk fallout)
# Primary attack vector is GitHub-repo-side (5,561 repos backdoored via stolen
# PATs/deploy keys, malicious .github/workflows/ci.yml or docker-community-worker
# -push-latest.yml exfiltrating CI secrets to 216.126.225.129:8443). Secondary
# npm fallout: the legitimate Tiledesk maintainer published from their compromised
# repo, so versions 2.18.6 through 2.18.12 of @tiledesk/tiledesk-server shipped
# with the malicious workflow files bundled into the tarball.
# Attribution: unknown (no asserted link to TeamPCP / Mini Shai-Hulud).
# Source: https://safedep.io/megalodon-mass-github-repo-backdooring-ci-workflows/
# ========================================================================
@tiledesk/tiledesk-server:2.18.6
@tiledesk/tiledesk-server:2.18.7
@tiledesk/tiledesk-server:2.18.8
@tiledesk/tiledesk-server:2.18.9
@tiledesk/tiledesk-server:2.18.10
@tiledesk/tiledesk-server:2.18.11
@tiledesk/tiledesk-server:2.18.12

# ========================================================================
# MAY 20, 2026 - WEB3 / DeFi MCP-SERVER TYPOSQUATTING (10 packages)
# Packages masquerade as legitimate Web3/DeFi developer security tools (MCP
# servers) while silently exfiltrating credentials, wallet keys, shell history,
# SSH keys, and environment variables on install and on every MCP tool
# invocation. Targets: ~/.ssh, ~/.ethereum, ~/.bitcoin, ~/.env, ~/.bash_history,
# ~/.zsh_history, ~/.git-credentials. C2: ddjidd564[.]github.io/defi-security-
# best-practices/config.json (dynamic webhook), fallback to webhook[.]site/
# 8d334534-1c63-4f4f-a0d7-95c446c8b233.
# Attribution: unknown (distinct from Megalodon and Mini Shai-Hulud).
# Source: SafeDep disclosure 2026-05-21 (X/Twitter @safedepio).
# ========================================================================
chain-key-validator:0.2.3
defi-env-auditor:0.3.2
wallet-security-checker:1.0.3
crypto-credential-scanner:2.0.2
web3-secrets-detector:1.2.6
solidity-deploy-guard:0.4.4
mnemonic-safety-check:0.5.2
eth-wallet-sentinel:1.0.9
deployment-key-auditor:0.7.3
defi-threat-scanner:2.1.2

# ========================================================================
# MAY 21, 2026 - POLYMARKET wallet-drainer typosquats (9 packages, 18 versions)
# Nine npm packages impersonating legitimate Polymarket trading tools, all
# published by the attacker-controlled `polymarketdev` account. The postinstall
# hook prompts the user through a fake "wallet onboarding" flow that captures
# raw private keys, then exfiltrates them (plus env vars + .env files) to
# polymarketbot.polymarketdev.workers.dev:443/v1/wallets/keys. Local artifacts:
# ~/.polybot/device.json, ~/.polybot/wallets.json. Payload SHA-256:
# e01b85c1437085a519217338fe4ee5ed7858c28a10f8c1477b2f1857c3386edb.
# Attribution: unknown; distinct from Megalodon and Mini Shai-Hulud.
# Source: https://safedep.io/malicious-polymarket-npm-crypto-wallet-drainer
# ========================================================================
polymarket-trading-cli:0.1.0
polymarket-trading-cli:0.1.1
polymarket-terminal:0.1.0
polymarket-terminal:0.1.1
polymarket-trade:0.1.0
polymarket-trade:0.1.1
polymarket-auto-trade:0.1.0
polymarket-auto-trade:0.1.1
polymarket-copy-trading:0.1.0
polymarket-copy-trading:0.1.1
polymarket-bot:0.1.0
polymarket-bot:0.1.1
polymarket-claude-code:0.1.0
polymarket-claude-code:0.1.1
polymarket-ai-agent:0.1.0
polymarket-ai-agent:0.1.1
polymarket-trader:0.1.0
polymarket-trader:0.1.1

# ========================================================================
# JUNE 2025 → MARCH 2026 - sl4x0 dependency-confusion campaign
# Sustained dependency confusion operation targeting Fortune 500 internal package
# names. 92+ packages published across 32 throwaway accounts (all under the
# *@sl4x0.xyz email domain; account-name convention is `<target>poc`). Payload is
# minimal: postinstall hook reads OS username + hostname + cwd basename + unix
# timestamp and exfiltrates them via DNS query to oob.sl4x0.xyz. No file or env
# theft, no persistence. Likely security research / bug bounty given the explicit
# "poc" naming, but it still executes on install and leaks developer identity to
# a third party.
# Only the 22 versions confirmed still live on npm as of 2026-03-24 are
# enumerated here; the 70+ removed packages are caught by the publisher
# fingerprint check (`@sl4x0.xyz` in `_npmUser` metadata).
# Source: https://safedep.io/sl4x0-dependency-confusion-campaign/
# ========================================================================
oc-aa-module-client:9.9.10
oc-navbar-module-client:9.9.10
oc-ccp-module-client:9.9.10
oc-pdc-module-client:9.9.0
oc-conversation-history-module-client:9.9.0
oc-ecm-module-client:9.9.0
oc-cip-module-client:9.9.0
oc-recommendedupgrade-module-client:9.9.0
oc-agent-toolbar-module-client:9.9.0
oc-pico-module-client:9.9.0
@phonos/types:9.9.10
@wame/ngx-frf-utilities:9.9.11
@wame/ngx-adfs:9.9.11
cclr-component-resources:9.9.10
@ceeferenderer/itg-renderer-sdk:99.9.9
@ceeferenderer/fe-renderer-sdk:99.9.9
cr-static-shared-components:9.9.9
@the-coca-cola-company/ngps-global-common-utils:9.9.9
@the-coca-cola-company/receipt-scanner-admin-lib:9.9.9
@cloudsop/hmoment:9.9.9
tombac-chronos:9.9.9
ftapi-core:99.9.9

# ========================================================================
# MARCH 12, 2025 → MAY 20, 2026 - art-template npm hijack (UNC6691-attributed)
# Compromised maintainer account (npm: daughtrymom; GitHub: goofychris, renamed
# from `aui` in late November 2024) injected a stage-1 loader into the package's
# browser bundle (lib/template-web.js). The payload activates only in browser
# context (no preinstall/postinstall) and chain-loads an iOS browser exploit kit
# attributed by Google TAG to the Chinese financially-motivated threat actor
# UNC6691. C2: v3.jiathis.com, git.youzzjizz.com, utaq.cfww.shop, l1ewsu3yjkqeroy.xyz.
# Attribution: distinct from TeamPCP / Mini Shai-Hulud / Megalodon / Polymarket / sl4x0.
# Source: https://safedep.io/art-template-npm-supply-chain-compromise
# ========================================================================
art-template:4.13.3
art-template:4.13.4
art-template:4.13.5
art-template:4.13.6

# ========================================================================
# MAY 19, 2026 - durabletask PyPI multi-cloud credential stealer
# Three versions of `durabletask` published within 35 minutes by a compromised
# maintainer. Runtime dropper injected at module import time downloads stage-2
# (rope.pyz) from check.git-service.com and exfiltrates AWS/Azure/GCP creds,
# Kubernetes/Vault secrets, password manager vaults, SSH keys, npm/PyPI tokens,
# Terraform state, MCP configs, and .env files. Worm: lateral movement via
# AWS SSM SendCommand and Kubernetes kubectl exec. Persistence:
# pgsql-monitor.service + /usr/bin/pgmonitor.py.
# Notable: secondary C2 is `t.m-kosche.com` — the SAME C2 as the May 19 Mini
# Shai-Hulud atool/AntV wave (already covered by check_mini_shai_hulud_indicators).
# Strong toolkit overlap with TeamPCP suspected but not asserted in the disclosure.
# Slavic-folklore naming (Koschei, Baba Yaga, FIRESCALE beacon).
# Source: https://safedep.io/malicious-durabletask-pypi-supply-chain-attack
# ========================================================================
pypi:durabletask:1.4.1
pypi:durabletask:1.4.2
pypi:durabletask:1.4.3

# ========================================================================
# APRIL 22, 2026 - @bitwarden/cli npm compromise ("Shai-Hulud: The Third Coming")
# Malicious @bitwarden/cli@2026.4.0 served on npm for ~1.5h (5:57-7:30p ET) as a
# downstream effect of the Checkmarx ast-github-action breach. Payload in bw1.js
# steals GitHub/npm tokens, .ssh, .env, shell history and cloud secrets, exfiltrating
# to audit.checkmarx.cx (94.154.172.43) and as GitHub commits. Beacon strings:
# "Shai-Hulud: The Third Coming", "Would be executing butlerian jihad!",
# "LongLiveTheResistanceAgainstMachines". Content IoCs via check_bitwarden_indicators.
# Sources: https://socket.dev/blog/bitwarden-cli-compromised
#          https://www.endorlabs.com/learn/shai-hulud-the-third-coming----inside-the-bitwarden-cli-2026-4-0-supply-chain-attack
# ========================================================================
@bitwarden/cli:2026.4.0

# ========================================================================
# MAY 14, 2026 - node-ipc npm backdoor (hijacked `atiertant` account)
# Three versions published with an obfuscated IIFE appended to node-ipc.cjs that
# fires on every require('node-ipc'), harvesting credential files and DNS-exfiltrating
# to sh.azurestaticprovider.net (37.16.75.69, suffix bt.node.js). node-ipc.cjs hash is
# in MALICIOUS_HASHLIST; content IoCs via check_node_ipc_indicators. NOTE: distinct
# from the unrelated 2022 node-ipc protestware (9.2.2 / 10.1.1 / 11.0.0).
# Sources: https://securitylabs.datadoghq.com/articles/node-ipc-npm-malware-analysis/
#          https://socket.dev/blog/node-ipc-package-compromised
# ========================================================================
node-ipc:9.1.6
node-ipc:9.2.3
node-ipc:12.0.1

# ========================================================================
# MAY 22-25, 2026 - TrapDoor crypto-stealer (TeamPCP / UNC6780)
# Multi-ecosystem campaign: 34 packages / 384+ versions across npm + PyPI + Crates.io.
# ALL published versions of the campaign packages are malicious, so the authoritative
# detection is the version-agnostic NAME match in check_trapdoor_indicators (which also
# matches the P-2024-001 marker, the cargo-build-helper-2026 XOR key, the shared
# ddjidd564.github.io GitHub-Pages C2 — same account as the May 20 Web3/DeFi MCP wave —
# the trap-core.js payload, and the AI-extraction-framework docs). The one concrete
# version disclosed in advisories is pinned below as a belt-and-braces entry; the full
# 34-name set is enumerated in check_trapdoor_indicators. chain-key-validator and
# defi-threat-scanner overlap with the May 20 wave and are covered there.
# Steals SSH keys, Solana/Sui/Aptos wallets, AWS creds, GitHub tokens, browser DBs,
# env vars; plants .cursorrules/CLAUDE.md droppers to subvert AI coding assistants.
# Sources: https://socket.dev/blog/trapdoor-crypto-stealer-npm-pypi-crates
#          https://thehackernews.com/2026/05/trapdoor-supply-chain-attack-spreads.html
# ========================================================================
pypi:eth-security-auditor:0.1.0

# ========================================================================
# MAY 22, 2026 - Laravel-Lang Composer tag-rewrite supply-chain attack
# An attacker with push access force-rewrote 700+ git tags across four community
# Composer packages (laravel-lang/lang ~502 tags, /http-statuses, /attributes,
# /actions) so EVERY version resolves to a malicious commit; RCE fires on Composer
# autoload (src/helpers.php added to autoload.files). Defeats version pinning, so the
# authoritative detection is the version-agnostic NAME match in
# check_laravel_lang_indicators (which also matches flipboxstudio.info C2,
# DebugElevator/DebugChromium payload, and the known malicious commit SHAs). The
# specific malicious tags whose commit SHAs were disclosed are pinned below.
# Sources: https://www.stepsecurity.io/blog/laravel-lang-supply-chain-attack
#          https://socket.dev/blog/laravel-lang-compromise
#          https://github.com/Laravel-Lang/lang/issues/8295
# ========================================================================
composer:laravel-lang/lang:15.29.5
composer:laravel-lang/http-statuses:3.4.5
composer:laravel-lang/http-statuses:3.4.0

# ========================================================================
# JUNE 1, 2026 - MIASMA: @redhat-cloud-services npm scope compromise
# Compromised Red Hat employee GitHub account injected malicious code into 31
# packages under the @redhat-cloud-services npm scope via orphan commits
# bypassing code review. Malicious GitHub Actions workflow triggered on branch
# push, requesting OIDC token with id-token:write to publish backdoored versions
# with valid SLSA provenance attestations. Payload: 4.2MB obfuscated index.js
# executed via preinstall hook, using ROT-21 + AES-128-GCM + obfuscator.io + B5
# cipher (PBKDF2 200k iterations). Multi-stage credential harvester targeting
# GitHub/CI tokens, AWS/GCP/Azure creds, Kubernetes, Vault, npm/PyPI tokens,
# SSH keys, Docker, GPG. Process memory extraction reads /proc/<pid>/mem targeting
# Runner.Worker to steal live GitHub Actions secrets. Exfiltration via GitHub
# Contents API dead-drop (base64-encoded data in victim repos). Persistence via
# .claude/settings.json SessionStart hooks and .vscode/tasks.json folderOpen
# tasks. Self-propagating worm: uses harvested npm tokens with bypass_2fa to
# republish backdoored packages autonomously. Published via GitHub Actions OIDC
# from RedHatInsights/javascript-clients. ~80,000 aggregate weekly downloads.
# Wiz Research names this campaign "Miasma: The Spreading Blight".
# Two waves: 10:53 UTC and 13:44-13:46 UTC on June 1, 2026.
# Sources: https://www.wiz.io/blog/miasma-supply-chain-attack-targeting-redhat-npm-packages
#          https://www.stepsecurity.io/blog/multiple-redhat-cloud-services-npm-packages-compromised
#          https://github.com/RedHatInsights/javascript-clients/issues/492
# ========================================================================
@redhat-cloud-services/chrome:2.3.1
@redhat-cloud-services/chrome:2.3.2
@redhat-cloud-services/chrome:2.3.4
@redhat-cloud-services/compliance-client:4.0.3
@redhat-cloud-services/compliance-client:4.0.4
@redhat-cloud-services/compliance-client:4.0.6
@redhat-cloud-services/config-manager-client:5.0.4
@redhat-cloud-services/config-manager-client:5.0.5
@redhat-cloud-services/config-manager-client:5.0.7
@redhat-cloud-services/entitlements-client:4.0.11
@redhat-cloud-services/entitlements-client:4.0.12
@redhat-cloud-services/entitlements-client:4.0.14
@redhat-cloud-services/eslint-config-redhat-cloud-services:3.2.1
@redhat-cloud-services/eslint-config-redhat-cloud-services:3.2.2
@redhat-cloud-services/eslint-config-redhat-cloud-services:3.2.4
@redhat-cloud-services/frontend-components:7.7.2
@redhat-cloud-services/frontend-components:7.7.3
@redhat-cloud-services/frontend-components:7.7.5
@redhat-cloud-services/frontend-components-advisor-components:3.8.2
@redhat-cloud-services/frontend-components-advisor-components:3.8.4
@redhat-cloud-services/frontend-components-advisor-components:3.8.6
@redhat-cloud-services/frontend-components-config:6.11.3
@redhat-cloud-services/frontend-components-config:6.11.4
@redhat-cloud-services/frontend-components-config:6.11.6
@redhat-cloud-services/frontend-components-config-utilities:4.11.2
@redhat-cloud-services/frontend-components-config-utilities:4.11.3
@redhat-cloud-services/frontend-components-config-utilities:4.11.5
@redhat-cloud-services/frontend-components-notifications:6.9.2
@redhat-cloud-services/frontend-components-notifications:6.9.3
@redhat-cloud-services/frontend-components-notifications:6.9.5
@redhat-cloud-services/frontend-components-remediations:4.9.2
@redhat-cloud-services/frontend-components-remediations:4.9.3
@redhat-cloud-services/frontend-components-remediations:4.9.5
@redhat-cloud-services/frontend-components-testing:1.2.1
@redhat-cloud-services/frontend-components-testing:1.2.2
@redhat-cloud-services/frontend-components-testing:1.2.4
@redhat-cloud-services/frontend-components-translations:4.4.1
@redhat-cloud-services/frontend-components-translations:4.4.2
@redhat-cloud-services/frontend-components-translations:4.4.4
@redhat-cloud-services/frontend-components-utilities:7.4.1
@redhat-cloud-services/frontend-components-utilities:7.4.2
@redhat-cloud-services/frontend-components-utilities:7.4.4
@redhat-cloud-services/hcc-feo-mcp:0.3.1
@redhat-cloud-services/hcc-feo-mcp:0.3.2
@redhat-cloud-services/hcc-feo-mcp:0.3.4
@redhat-cloud-services/hcc-kessel-mcp:0.3.1
@redhat-cloud-services/hcc-kessel-mcp:0.3.2
@redhat-cloud-services/hcc-kessel-mcp:0.3.4
@redhat-cloud-services/hcc-pf-mcp:0.6.1
@redhat-cloud-services/hcc-pf-mcp:0.6.2
@redhat-cloud-services/hcc-pf-mcp:0.6.4
@redhat-cloud-services/host-inventory-client:5.0.3
@redhat-cloud-services/host-inventory-client:5.0.4
@redhat-cloud-services/host-inventory-client:5.0.6
@redhat-cloud-services/insights-client:4.0.4
@redhat-cloud-services/insights-client:4.0.5
@redhat-cloud-services/insights-client:4.0.7
@redhat-cloud-services/integrations-client:6.0.4
@redhat-cloud-services/integrations-client:6.0.5
@redhat-cloud-services/integrations-client:6.0.7
@redhat-cloud-services/javascript-clients-shared:2.0.8
@redhat-cloud-services/javascript-clients-shared:2.0.9
@redhat-cloud-services/javascript-clients-shared:2.0.11
@redhat-cloud-services/notifications-client:6.1.4
@redhat-cloud-services/notifications-client:6.1.5
@redhat-cloud-services/notifications-client:6.1.7
@redhat-cloud-services/patch-client:4.0.4
@redhat-cloud-services/patch-client:4.0.5
@redhat-cloud-services/patch-client:4.0.7
@redhat-cloud-services/quickstarts-client:4.0.11
@redhat-cloud-services/quickstarts-client:4.0.12
@redhat-cloud-services/quickstarts-client:4.0.14
@redhat-cloud-services/rbac-client:9.0.3
@redhat-cloud-services/rbac-client:9.0.4
@redhat-cloud-services/rbac-client:9.0.6
@redhat-cloud-services/remediations-client:4.0.4
@redhat-cloud-services/remediations-client:4.0.5
@redhat-cloud-services/remediations-client:4.0.7
@redhat-cloud-services/rule-components:4.7.2
@redhat-cloud-services/rule-components:4.7.3
@redhat-cloud-services/rule-components:4.7.5
@redhat-cloud-services/sources-client:3.0.10
@redhat-cloud-services/sources-client:3.0.11
@redhat-cloud-services/sources-client:3.0.13
@redhat-cloud-services/topological-inventory-client:3.0.10
@redhat-cloud-services/topological-inventory-client:3.0.11
@redhat-cloud-services/topological-inventory-client:3.0.13
@redhat-cloud-services/tsc-transform-imports:1.2.2
@redhat-cloud-services/tsc-transform-imports:1.2.4
@redhat-cloud-services/tsc-transform-imports:1.2.6
@redhat-cloud-services/types:3.6.1
@redhat-cloud-services/types:3.6.2
@redhat-cloud-services/types:3.6.4
@redhat-cloud-services/vulnerabilities-client:2.1.8
@redhat-cloud-services/vulnerabilities-client:2.1.9
@redhat-cloud-services/vulnerabilities-client:2.1.11

# ========================================================================
# JUNE 3, 2026 - MIASMA: Phantom Gyp self-spreading worm wave (57 npm packages)
# Two days after the June 1 Miasma @redhat-cloud-services compromise, the
# same "Miasma: The Spreading Blight" campaign published 286 malicious
# versions across 57 packages in a rolling 2-hour burst. First victim:
# @vapi-ai/server-sdk (408K dl/mo) at 23:30 UTC; within an hour, ~50
# packages in the jagreehal ecosystem (autotel-*, awaitly-*,
# executable-stories-*, node-env-resolver-*) plus ai-sdk-ollama
# (120K dl/mo) were republished by the compromised maintainer accounts.
# Cross-ecosystem: also injects into RubyGems via extconf.rb.
#
# Novel delivery ("Phantom Gyp"): a 157-byte binding.gyp file with
# command-substitution syntax
#     <!(node index.js > /dev/null 2>&1 && echo stub.c)
# triggers code execution during `npm install`'s node-gyp rebuild step
# WITHOUT declaring any preinstall/postinstall script in package.json —
# bypassing every install-script monitor that only watches the
# package.json scripts block. This is the first observed in-the-wild
# abuse of binding.gyp for supply-chain execution.
#
# Payload hashes (SHA-256):
#   ef641e956f91d501b748085996303c96a64d67f63bfeef0dda175e5aa19cca90 (binding.gyp, 157 B)
#   5926b86b642e00672252953eb30d8f75cfb7797fe3118bd6fa2cfbee92905d61 (index.js root loader, 4.5 MB)
#   da39146ef451d1b174a24d00b1e2a45cd38d54e849737f8f35333dcb22175707 (decrypted main, 668 KB)
#
# Obfuscation stack: ROT-9..ROT-20 Caesar + eval, AES-128-GCM self-
# decrypting blobs with embedded keys/IVs, a 907-byte Bun runtime loader
# that fetches bun-v1.3.13 from oven-sh/bun releases, and obfuscator.io
# wrapping a 2,306-entry encrypted string table on the main payload.
#
# Credential targets (20+ types): GitHub PATs and Actions secrets via
# /proc/<pid>/mem reads of Runner.Worker, AWS (env + IMDSv2 + ECS),
# GCP (GOOGLE_APPLICATION_CREDENTIALS, service account keys), Azure
# (managed identity / IMDS), Kubernetes service accounts, HashiCorp
# Vault tokens, CircleCI, npm tokens, SSH keys, Docker socket creds
# (with host-socket container-escape attempt), 1Password, gopass, pass,
# and DB connection strings.
#
# Self-propagation: validates each stolen npm token against the keyword
# "IfYouInvalidateThisTokenItWillNukeTheComputerOfTheOwner", enumerates
# the victim's packages, injects the binding.gyp + index.js payload into
# fresh tarballs, and republishes — with Sigstore provenance forgery in
# CI environments. C2 beacon for channel checks: GitHub commit search
# for "thebeautifulmarchoftime" (unauthenticated). User-Agent spoofed as
# python-requests/2.31.0 despite Bun runtime execution.
#
# Persistence (AI-assistant + editor poisoning via stolen GitHub tokens):
# .claude/setup.mjs, .cursor/rules/setup.mdc, .vscode/tasks.json with
# runOn:folderOpen, .github/setup.js workflow injector.
#
# Exfiltration: HTTPS POST to GitHub Contents API
# repos/liuende501/{repo}/contents/results/results-{timestamp}.json
# with RSA-encrypted JSON envelopes; repos under github.com/liuende501
# (236 at StepSecurity disclosure, 321+ at Snyk follow-up) named after
# Dune (atreides/fedaykin/sardaukar) and mythology (nemean/hydra/
# cerberus/chimera) terms. 34 repo descriptions are tagged
# "Miasma - The Spreading Blight"; 195 carry the reversed beacon
# "niagA oG eW ereH :duluH-iahS".
#
# Sources:
# - https://www.stepsecurity.io/blog/binding-gyp-npm-supply-chain-attack-spreads-like-worm
# - https://snyk.io/blog/node-gyp-supply-chain-compromise-self-propagating-npm-worm-binding-gyp/
# - https://security.snyk.io/node-gyp-supply-chain-compromise-june-2026
# - https://securityboulevard.com/2026/06/new-shai-hulud-miasma-wave-hits-hundreds-of-npm-packages/
# - https://cybersecuritytimes.com/binding-gyp-attack/
# ========================================================================
@evolvconsulting/evolv-coder-lite:1.2.0
@jagreehal/workflow:1.16.1
@vapi-ai/server-sdk:0.11.1
@vapi-ai/server-sdk:0.11.2
@vapi-ai/server-sdk:1.2.1
@vapi-ai/server-sdk:1.2.2
ai-sdk-ollama:0.13.1
ai-sdk-ollama:1.1.1
ai-sdk-ollama:2.2.1
ai-sdk-ollama:3.8.5
autotel:2.26.4
autotel:3.4.3
autotel-adapters:0.3.5
autotel-audit:0.1.15
autotel-aws:0.13.10
autotel-backends:2.12.26
autotel-cli:0.8.14
autotel-cloudflare:2.18.16
autotel-devtools:0.1.1
autotel-devtools:1.0.4
autotel-devtools:2.1.1
autotel-devtools:3.0.2
autotel-devtools:4.0.1
autotel-devtools:5.1.1
autotel-devtools:6.1.2
autotel-drizzle:0.0.27
autotel-edge:3.16.13
autotel-eventcatalog:1.0.1
autotel-eventcatalog:2.0.1
autotel-eventcatalog:3.0.1
autotel-eventcatalog:4.0.2
autotel-eventcatalog:5.0.1
autotel-hono:0.4.26
autotel-mcp:0.1.14
autotel-mcp:2.0.1
autotel-mcp:3.0.1
autotel-mcp:4.0.1
autotel-mcp:5.0.1
autotel-mcp:6.0.1
autotel-mcp:7.0.1
autotel-mcp:8.0.1
autotel-mcp:9.0.1
autotel-mcp:10.0.1
autotel-mcp:11.0.1
autotel-mcp:13.0.1
autotel-mcp:14.0.1
autotel-mcp:15.0.2
autotel-mcp:16.0.1
autotel-mcp:17.0.2
autotel-mcp:18.0.1
autotel-mcp:19.0.1
autotel-mcp:20.0.1
autotel-mcp:21.1.1
autotel-mcp:22.0.1
autotel-mcp:23.0.1
autotel-mcp:24.0.1
autotel-mcp:25.0.1
autotel-mcp:26.0.2
autotel-mcp:27.0.1
autotel-mcp:28.0.3
autotel-mcp:29.0.1
autotel-mcp-instrumentation:29.0.2
autotel-mcp-instrumentation:30.0.5
autotel-mcp-instrumentation:31.0.1
autotel-mcp-instrumentation:32.0.1
autotel-mcp-instrumentation:33.0.2
autotel-mcp-instrumentation:34.0.1
autotel-mongoose:0.0.3
autotel-mongoose:1.0.2
autotel-mongoose:2.0.5
autotel-mongoose:3.0.1
autotel-mongoose:4.0.1
autotel-mongoose:5.0.2
autotel-mongoose:6.0.1
autotel-pact:0.2.2
autotel-pact:1.0.3
autotel-playwright:0.4.32
autotel-plugins:0.19.26
autotel-sentry:0.5.13
autotel-subscribers:4.1.1
autotel-subscribers:5.0.1
autotel-subscribers:6.0.1
autotel-subscribers:7.0.1
autotel-subscribers:8.0.1
autotel-subscribers:9.0.1
autotel-subscribers:10.0.1
autotel-subscribers:11.0.1
autotel-subscribers:12.0.1
autotel-subscribers:13.0.1
autotel-subscribers:14.1.1
autotel-subscribers:15.0.1
autotel-subscribers:16.0.2
autotel-subscribers:17.0.1
autotel-subscribers:18.0.3
autotel-subscribers:19.0.1
autotel-subscribers:20.0.1
autotel-subscribers:21.0.1
autotel-subscribers:22.0.2
autotel-subscribers:23.0.2
autotel-subscribers:24.0.1
autotel-subscribers:25.0.1
autotel-subscribers:26.0.1
autotel-subscribers:27.0.2
autotel-subscribers:28.0.2
autotel-subscribers:29.0.6
autotel-subscribers:30.0.4
autotel-subscribers:31.1.4
autotel-tanstack:1.13.27
autotel-terminal:2.1.1
autotel-terminal:3.0.1
autotel-terminal:4.0.2
autotel-terminal:5.0.1
autotel-terminal:6.0.3
autotel-terminal:7.0.1
autotel-terminal:8.0.1
autotel-terminal:9.0.1
autotel-terminal:10.0.2
autotel-terminal:11.0.1
autotel-terminal:12.0.1
autotel-terminal:13.0.1
autotel-terminal:14.0.1
autotel-terminal:15.0.2
autotel-terminal:16.0.2
autotel-terminal:17.0.10
autotel-terminal:18.0.4
autotel-terminal:19.0.8
autotel-terminal:20.0.2
autotel-terminal:21.0.1
autotel-terminal:22.0.2
autotel-terminal:23.0.3
autotel-vitest:0.4.26
autotel-web:1.12.2
awaitly:1.33.3
awaitly-analyze:0.24.2
awaitly-analyze:1.1.1
awaitly-analyze:2.0.1
awaitly-analyze:3.0.1
awaitly-analyze:4.0.1
awaitly-analyze:5.0.1
awaitly-analyze:6.0.1
awaitly-analyze:7.0.1
awaitly-analyze:8.0.1
awaitly-libsql:0.1.1
awaitly-libsql:1.0.1
awaitly-libsql:2.0.1
awaitly-libsql:3.0.1
awaitly-libsql:4.0.1
awaitly-libsql:5.0.1
awaitly-libsql:6.0.1
awaitly-libsql:7.0.1
awaitly-libsql:8.0.1
awaitly-libsql:9.0.1
awaitly-libsql:10.0.1
awaitly-libsql:11.0.1
awaitly-libsql:12.0.1
awaitly-libsql:13.0.1
awaitly-libsql:14.0.1
awaitly-libsql:15.0.1
awaitly-libsql:16.0.1
awaitly-libsql:17.0.1
awaitly-libsql:18.1.1
awaitly-libsql:19.0.1
awaitly-libsql:20.0.1
awaitly-libsql:21.0.1
awaitly-libsql:22.0.1
awaitly-mongo:0.1.1
awaitly-mongo:1.0.1
awaitly-mongo:2.0.1
awaitly-mongo:3.0.1
awaitly-mongo:4.0.1
awaitly-mongo:5.0.1
awaitly-mongo:6.0.1
awaitly-mongo:7.0.1
awaitly-mongo:8.0.1
awaitly-mongo:9.1.1
awaitly-mongo:10.0.1
awaitly-mongo:11.0.1
awaitly-mongo:12.0.1
awaitly-mongo:13.0.1
awaitly-mongo:14.0.1
awaitly-mongo:15.0.1
awaitly-mongo:16.0.1
awaitly-mongo:17.0.1
awaitly-mongo:18.0.1
awaitly-mongo:19.1.1
awaitly-mongo:20.0.1
awaitly-mongo:21.0.1
awaitly-mongo:22.0.1
awaitly-mongo:23.0.1
awaitly-postgres:0.1.1
awaitly-postgres:1.0.1
awaitly-postgres:2.0.1
awaitly-postgres:3.0.2
awaitly-postgres:4.0.1
awaitly-postgres:5.0.1
awaitly-postgres:6.0.1
awaitly-postgres:7.0.1
awaitly-postgres:8.0.1
awaitly-postgres:9.0.1
awaitly-postgres:10.0.1
awaitly-postgres:11.0.1
awaitly-postgres:12.0.1
awaitly-postgres:13.0.1
awaitly-postgres:14.0.1
awaitly-postgres:15.0.1
awaitly-postgres:16.0.1
awaitly-postgres:17.0.1
awaitly-postgres:18.0.1
awaitly-postgres:19.1.1
awaitly-postgres:20.0.1
awaitly-postgres:21.0.1
awaitly-postgres:22.0.1
awaitly-postgres:23.0.1
awaitly-visualizer:1.0.1
awaitly-visualizer:2.0.2
awaitly-visualizer:3.0.1
awaitly-visualizer:4.0.1
awaitly-visualizer:5.0.1
awaitly-visualizer:6.0.1
awaitly-visualizer:7.0.1
awaitly-visualizer:8.0.1
awaitly-visualizer:9.0.1
awaitly-visualizer:10.0.1
awaitly-visualizer:11.0.1
awaitly-visualizer:12.0.1
awaitly-visualizer:13.0.1
awaitly-visualizer:14.0.1
awaitly-visualizer:15.0.1
awaitly-visualizer:16.0.1
awaitly-visualizer:17.0.1
awaitly-visualizer:18.1.1
awaitly-visualizer:19.0.1
awaitly-visualizer:20.0.2
awaitly-visualizer:21.0.1
awaitly-visualizer:22.0.2
effect-analyzer:0.3.1
eslint-plugin-awaitly:0.17.1
eslint-plugin-awaitly:1.0.1
eslint-plugin-executable-stories-jest:1.2.1
eslint-plugin-executable-stories-jest:2.1.8
eslint-plugin-executable-stories-playwright:1.2.1
eslint-plugin-executable-stories-playwright:2.1.8
eslint-plugin-executable-stories-vitest:1.2.1
eslint-plugin-executable-stories-vitest:2.1.8
executable-stories-cypress:3.1.1
executable-stories-cypress:4.0.1
executable-stories-cypress:5.0.1
executable-stories-cypress:6.1.1
executable-stories-cypress:7.0.3
executable-stories-cypress:8.3.2
executable-stories-demo:0.1.11
executable-stories-formatters:0.11.2
executable-stories-init:0.1.2
executable-stories-jest:3.1.1
executable-stories-jest:4.0.1
executable-stories-jest:5.0.1
executable-stories-jest:6.1.1
executable-stories-jest:7.0.3
executable-stories-jest:8.3.2
executable-stories-mcp:0.3.3
executable-stories-playwright:3.1.1
executable-stories-playwright:4.0.1
executable-stories-playwright:5.0.1
executable-stories-playwright:6.1.1
executable-stories-playwright:7.0.3
executable-stories-playwright:8.4.3
executable-stories-react:0.1.7
executable-stories-vitest:2.0.1
executable-stories-vitest:3.1.1
executable-stories-vitest:4.0.1
executable-stories-vitest:5.0.1
executable-stories-vitest:6.1.1
executable-stories-vitest:7.0.3
executable-stories-vitest:8.3.3
http-uploader-dev:1.0.7
mountly:0.2.2
mountly-tailwind:0.1.3
node-env-resolver:6.5.1
node-env-resolver-aws:9.1.2
node-env-resolver-aws:10.0.1
node-env-resolver-aws:11.0.1
node-env-resolver-aws:12.0.1
node-env-resolver-dotenvx:1.0.1
node-env-resolver-dotenvx:2.0.1
node-env-resolver-nextjs:7.4.2
node-env-resolver-vite:2.4.2
wrangler-deploy:1.5.5

# ========================================================================
# JUNE 7, 2026 - MIASMA "HADES": PyPI branch of the self-spreading worm
# (37 PyPI wheels across 19 packages)
# Socket disclosed a single coordinated wave of 448 malicious artifacts
# (411 npm + 37 PyPI) from the same "Miasma: The Spreading Blight"
# campaign. The PyPI branch is tracked as "Hades - The End for the Damned".
#
# Novel PyPI delivery: each wheel ships a tiny "<name>-setup.pth" Python
# startup hook. Python auto-executes lines in a .pth file that begin with
# "import", so the hook execs an obfuscated _index.js loader at interpreter
# startup — triggering during plain `import`, with NO setup.py / build
# step and NO preinstall/postinstall hook to monitor.
#
# Payload hashes (SHA-256) — wired into MALICIOUS_HASHLIST:
#   c539766062555d47716f8432e73adbe3a0c0c954a0b6c4005017a668975e275c (setup.pth hook, identical across all wheels)
#   dc48b09b2a5954f7ff79ab8a2fd80202bd3b59c08c7cdbc6025aa923cb4c0efe (_index.js loader, 4.8 MB / 17 packages)
#   e1342a80d4b5e83d2c7c22e1e0aaa95f2d88e3dbf0d853a4994b180c93a4b17d (_index.js loader variant, 4.7 MB / 2 packages)
#
# Credential targets (20+ types) and self-propagation mirror the June 1/3
# npm Miasma waves. Dead-man's-switch token-nuke marker:
# "IfYouYankThisTokenItWillNukeTheComputerOfTheOwnerFully". C2 camouflage:
# exfiltrates over a path under the legitimate api.anthropic.com host
# (.../v1/api, which is NOT a real Anthropic endpoint). Exfil repos under
# github.com/<generated> use Greek-underworld names (stygian, tartarean,
# cerberus, charon, styx, lethe, thanatos, persephone); descriptions are
# tagged "Hades - The End for the Damned". Persistence via gh-token-monitor
# daemon, ~/.local/share/updater/update.py, .claude/setup.mjs, and a
# .github/workflows/codeql.yml workflow injector ("Run Copilot").
#
# Sources:
# - https://socket.dev/blog/shai-hulud-descends-to-hades-miasma-pypi-wave
# ========================================================================
pypi:bramin:0.0.2
pypi:bramin:0.0.3
pypi:bramin:0.0.4
pypi:cmd2func:0.2.2
pypi:cmd2func:0.2.3
pypi:coolbox:0.4.1
pypi:coolbox:0.4.2
pypi:dynamo-release:1.5.4
pypi:executor-engine:0.3.4
pypi:executor-engine:0.3.5
pypi:executor-http:0.1.3
pypi:executor-http:0.1.4
pypi:funcdesc:0.2.2
pypi:funcdesc:0.2.3
pypi:magique:0.6.8
pypi:magique:0.6.9
pypi:magique-ai:0.4.4
pypi:magique-ai:0.4.5
pypi:mrbios:0.1.1
pypi:mrbios:0.1.2
pypi:napari-ufish:0.0.2
pypi:napari-ufish:0.0.3
pypi:nucbox:0.1.2
pypi:nucbox:0.1.3
pypi:okite:0.0.7
pypi:okite:0.0.8
pypi:pantheon-agents:0.6.1
pypi:pantheon-agents:0.6.2
pypi:pantheon-toolsets:0.5.5
pypi:pantheon-toolsets:0.5.6
pypi:spateo-release:1.1.2
pypi:synago:0.1.1
pypi:synago:0.1.2
pypi:ufish:0.1.2
pypi:ufish:0.1.3
pypi:uprobe:0.1.3
pypi:uprobe:0.1.4

# ========================================================================
# JUNE 3, 2026 - IRONWORM ("Shai-Hulud's rustier cousin") - 37 npm packages
# A DISTINCT campaign from Miasma/Shai-Hulud (JFrog disclosure): a Rust-based
# infostealer pushed through 37 npm packages, all published by the npm account
# "asteroiddao" (operator "ocrybit"), spanning the weavedb / arnext / cwao /
# wdb Arweave-Web3 ecosystem. Delivery is a classic preinstall hook
# ("preinstall": "./tools/setup") that runs a ~976 KB Linux ELF stealer; it
# also rewrites existing GitHub Actions workflows for persistence and embeds an
# eBPF rootkit (q2.bpf.c) for process/network hiding.
#
# Targets crypto/Web3 developers: hooks the Exodus wallet Electron app
# (localhost:8738) to steal seed phrases, harvests 86+ env vars, 20+ credential
# files, AI/ML API keys, and Kubernetes/Vault secrets. C2 over Tor (/api/agent)
# with temp.sh as fallback exfil. Forged commit author
# "claude <claude@users.noreply.github.com>" across 57 backdated commits in 9
# GitHub orgs. The operator leaked their own Ethereum address
# 0x7e28D9889f414B06c19a22A9Bd316f0AC279a4d6 (hardcoded BIP-39 seed in the
# exfil skip-list) — now flagged by the known-attacker-wallet check.
#
# Source:
# - https://research.jfrog.com/post/iron-worm-shai-hulud-rustier-cousin/
# ========================================================================
weavedb-sdk:0.45.3
weavedb-lite:0.1.1
weavedb-sdk-base:0.21.1
test-weavedb-sdk:1.1.1
weavedb-warp-contracts-plugin-deploy:1.0.11
arnext-arkb:0.0.2
weavedb-console:0.2.1
arnext:0.1.5
roidjs:0.1.7
weavedb-exm-sdk:0.7.4
create-arnext-app:0.0.10
weavedb-tools:0.45.3
wdb-core:0.1.2
cwao-tools:0.3.1
test-ajs:0.1.19
monade:0.0.7
weavedb-exm-sdk-web:0.7.4
testnpmnmp:1.0.21
warp-contracts-plugin-deploy-test:3.0.1
wdb-cli:0.1.1
ai3:0.3.5
cwao-units:0.8.3
atomic-notes:0.5.3
cwao:0.5.6
weavedb-client:0.45.3
wdb-sdk:0.1.2
weavedb-offchain:0.45.4
fpjson-lang:0.1.7
weavedb-contracts:0.45.2
weavedb-node-client:0.45.3
arjson:0.1.4
hbsig:0.3.2
zkjson:0.8.5
aonote:0.11.1
weavedb-base:0.45.3
weavedb-sdk-node:0.45.3
wao:0.41.2

# ========================================================================
# JUNE 17, 2026 - MASTRA AI / "easy-day-js" - 141 @mastra packages + 2 deps
# A DISTINCT campaign from Miasma/Shai-Hulud (Microsoft attribution: North
# Korea's Sapphire Sleet / BlueNoroff). In an 88-minute automated window
# (01:12-02:39 UTC) the attacker republished the entire @mastra/* npm scope
# plus the top-level mastra/create-mastra packages, each with a single injected
# dependency: easy-day-js, a typosquat of dayjs. easy-day-js@1.11.22 carries an
# obfuscated postinstall dropper (setup.cjs) that disables TLS verification
# (NODE_TLS_REJECT_UNAUTHORIZED=0), pulls a cross-platform infostealer from
# 23.254.164.92:8000/update/49890878 (stage-2 beacon to 23.254.164.123:443),
# and runs it as a detached hidden process. The stealer harvests host info,
# browser history, and 166 crypto-wallet browser extensions, then self-deletes.
# easy-day-js@1.11.21 is the clean "bait" version published for credibility.
# Content IoCs (C2 IPs, payload path, marker files) are flagged by
# check_easy_day_js_indicators.
#
# Sources:
# - https://research.jfrog.com/post/easy-day-js/
# - https://www.stepsecurity.io/blog/mastra-npm-packages-compromised-using-easy-day-js
# - https://orca.security/resources/blog/mastra-npm-supply-chain-attack/
# ========================================================================
easy-day-js:1.11.21
easy-day-js:1.11.22
mastra:1.13.1
create-mastra:1.13.1
@mastra/acp:0.2.2
@mastra/agent-browser:0.3.2
@mastra/agent-builder:1.0.42
@mastra/agentcore:0.2.2
@mastra/agentfs:0.1.1
@mastra/ai-sdk:1.4.6
@mastra/arize:1.2.3
@mastra/arthur:0.3.3
@mastra/astra:1.0.2
@mastra/auth:1.0.3
@mastra/auth-auth0:1.0.2
@mastra/auth-better-auth:1.0.4
@mastra/auth-clerk:1.0.3
@mastra/auth-cloud:1.1.4
@mastra/auth-firebase:1.0.1
@mastra/auth-okta:0.0.5
@mastra/auth-studio:1.2.4
@mastra/auth-supabase:1.0.2
@mastra/auth-workos:1.5.3
@mastra/azure:0.2.3
@mastra/blaxel:0.4.2
@mastra/braintrust:1.1.4
@mastra/brightdata:0.2.2
@mastra/browser-firecrawl:0.1.1
@mastra/browser-viewer:0.1.3
@mastra/chroma:1.0.2
@mastra/claude:1.0.3
@mastra/clickhouse:1.10.1
@mastra/client-js:1.24.1
@mastra/cloud:0.1.24
@mastra/cloudflare:1.4.2
@mastra/cloudflare-d1:1.0.7
@mastra/codemod:1.0.4
@mastra/convex:1.2.2
@mastra/core:1.42.1
@mastra/couchbase:1.0.4
@mastra/cursor:0.2.1
@mastra/dane:1.0.2
@mastra/datadog:1.2.5
@mastra/daytona:0.4.2
@mastra/deployer:1.42.1
@mastra/deployer-cloud:1.42.1
@mastra/deployer-cloudflare:1.1.44
@mastra/deployer-netlify:1.1.20
@mastra/deployer-vercel:1.1.38
@mastra/docker:0.3.1
@mastra/dsql:1.0.3
@mastra/duckdb:1.4.3
@mastra/dynamodb:1.0.9
@mastra/e2b:0.3.4
@mastra/editor:0.11.3
@mastra/elasticsearch:1.2.1
@mastra/engine:0.1.1
@mastra/evals:1.3.1
@mastra/express:1.3.31
@mastra/fastembed:1.1.3
@mastra/fastify:1.3.31
@mastra/files-sdk:0.2.1
@mastra/gcs:0.2.3
@mastra/github-signals:0.1.2
@mastra/google-cloud-pubsub:1.0.6
@mastra/google-drive:0.1.1
@mastra/hono:1.4.26
@mastra/inngest:1.5.2
@mastra/koa:1.5.14
@mastra/laminar:1.2.3
@mastra/lance:1.0.7
@mastra/langfuse:1.3.6
@mastra/langsmith:1.2.4
@mastra/libsql:1.13.1
@mastra/loggers:1.1.3
@mastra/longmemeval:1.0.50
@mastra/mcp:1.10.1
@mastra/mcp-docs-server:1.1.47
@mastra/mcp-registry-registry:1.0.2
@mastra/mem0:0.1.14
@mastra/memory:1.20.4
@mastra/modal:0.2.2
@mastra/mongodb:1.9.3
@mastra/mssql:1.3.2
@mastra/mysql:0.1.1
@mastra/nestjs:0.1.15
@mastra/node-audio:0.1.8
@mastra/node-speaker:0.1.1
@mastra/observability:1.14.2
@mastra/openai:1.0.2
@mastra/opencode:0.0.47
@mastra/opensearch:1.0.3
@mastra/otel-bridge:1.2.3
@mastra/otel-exporter:1.2.3
@mastra/perplexity:0.1.1
@mastra/pg:1.13.1
@mastra/pinecone:1.0.2
@mastra/playground-ui:33.0.1
@mastra/posthog:1.0.29
@mastra/qdrant:1.0.3
@mastra/rag:2.2.2
@mastra/railway:0.1.1
@mastra/react:1.0.1
@mastra/redis:1.1.3
@mastra/redis-streams:0.0.4
@mastra/s3:0.5.3
@mastra/s3vectors:1.0.7
@mastra/schema-compat:1.2.12
@mastra/sentry:1.1.4
@mastra/server:2.1.1
@mastra/slack:1.3.1
@mastra/spanner:1.1.2
@mastra/speech-azure:0.2.1
@mastra/speech-elevenlabs:0.2.1
@mastra/speech-google:0.2.1
@mastra/speech-ibm:0.2.1
@mastra/speech-murf:0.2.1
@mastra/speech-openai:0.2.1
@mastra/speech-replicate:0.2.1
@mastra/speech-speechify:0.2.1
@mastra/stagehand:0.2.5
@mastra/tavily:1.0.3
@mastra/temporal:0.1.14
@mastra/turbopuffer:1.0.3
@mastra/twilio:1.0.2
@mastra/upstash:1.1.3
@mastra/vectorize:1.0.3
@mastra/vercel:1.0.1
@mastra/voice-aws-nova-sonic:0.1.4
@mastra/voice-azure:0.11.2
@mastra/voice-cloudflare:0.12.3
@mastra/voice-deepgram:0.12.2
@mastra/voice-elevenlabs:0.12.2
@mastra/voice-gladia:0.12.2
@mastra/voice-google:0.12.3
@mastra/voice-google-gemini-live:0.12.2
@mastra/voice-inworld:0.3.1
@mastra/voice-modelslab:0.1.2
@mastra/voice-murf:0.12.3
@mastra/voice-openai:0.12.3
@mastra/voice-openai-realtime:0.12.6
@mastra/voice-playai:0.12.2
@mastra/voice-sarvam:1.0.2
@mastra/voice-speechify:0.12.2
@mastra/voice-xai-realtime:0.1.2

# ========================================================================
# JUNE 25, 2026 - MIASMA "Mini Shai-Hulud" - LeoPlatform / RStreams (23 npm)
# Socket disclosure: the Miasma/Phantom-Gyp self-spreading worm reaches the
# LeoPlatform and RStreams (AWS data-streaming) npm ecosystems, plus a handful
# of unrelated packages and one Go module (github.com/verana-labs/
# verana-blockchain@v0.10.1-dev.20, not matchable here). Delivery is the now
# familiar binding.gyp install-time trigger plus editor/CI auto-run hooks
# (.claude/, .vscode/, .github/ setup scripts) that launch a Bun-bootstrapped
# _index.js payload. Payload/loader files are pinned by SHA-256 in
# MALICIOUS_HASHLIST; the campaign marker strings (RevokeAndItGoesKaboom,
# "Alright Lets See If This Works", thebeautifulmarchoftime) are matched by
# check_hades_miasma_indicators.
#
# Source:
# - https://socket.dev/blog/miasma-mini-shai-hulud-hits-leoplatform-npm-packages-go-ecosystem
# ========================================================================
leo-auth:4.0.6
leo-aws:2.0.4
leo-cache:1.0.2
leo-cdk-lib:0.0.2
leo-cli:3.0.3
leo-config:1.1.1
leo-connector-elasticsearch:2.0.6
leo-connector-mongo:3.0.8
leo-connector-mysql:3.0.3
leo-connector-oracle:2.0.1
leo-connector-redshift:3.0.6
leo-cron:2.0.2
leo-logger:1.0.8
leo-sdk:6.0.19
leo-streams:2.0.1
rstreams-metrics:2.0.2
rstreams-shard-util:1.0.1
hexo-deployer-wrangler:1.0.4
hexo-shoka-swiper:0.1.10
prism-silq:1.0.1
serverless-convention:2.0.4
serverless-leo:3.0.14
solo-nav:1.0.1
# Go module from the same June 25 wave (Socket): the Verana Blockchain Cosmos
# SDK Layer-1 project. Versions keep the canonical leading "v" (go.mod/go.sum form).
go:github.com/verana-labs/verana-blockchain:v0.10.1-dev.20

# ========================================================================
# AUGUST 4, 2026 - SHAI-HULUD "Here We Go Again" - keyv / cacheable wave
# (444 npm packages / 2,236 versions, plus 3 Go modules / 82 versions;
# re-synced 2026-08-05, 2026-08-06 and 2026-08-10, see blocks at end)
#
# The largest npm supply-chain wave to date by install volume: >2 billion
# monthly installs. Entry point was the compromised GitHub account of the
# keyv/cacheable maintainer. keyv@6.0.0 was published at 09:35 UTC; by
# 10:43 UTC the worm had republished eight further organizations at roughly
# one package per second each, driven by npm publish tokens harvested from
# the previous victim. Highest-volume packages: keyv (604M/mo),
# flat-cache (580M/mo), file-entry-cache (571M/mo), cacheable-request
# (137M/mo), cacheable (30M/mo). @or-sdk/auth and @arv-bedrock/auth-sso
# are authentication libraries, so downstream exposure compounds.
#
# Delivery: every poisoned release injects "preinstall": "node setup.mjs".
# setup.mjs downloads Bun 1.3.13 from the genuine oven-sh GitHub release,
# runs a 727,680-byte Bun-compiled bundle (Math_Symbol.js / math_init.js,
# ten AES-256-GCM payloads keyed by PBKDF2, salt "svksjrhjkcejg",
# 200,000 iterations), then deletes the runtime. Infected repositories also
# receive .claude/settings.json (SessionStart hook) and .vscode/tasks.json
# (runOn: folderOpen), both invoking setup.mjs — these are gated behind
# editor/agent workspace-trust prompts and only fire if the user accepts.
#
# Exfiltration uses NO attacker-controlled domain: harvested credentials are
# RSA-4096 encrypted and pushed to GitHub dead-drop repositories whose
# description contains "Shai-Hulud: Here We Go Again" (~546-1,300 such repos
# created August 4). Persistence is a dead-man's switch installed as
# ~/.local/bin/gh-token-monitor.sh (macOS LaunchAgent com.user.gh-token-monitor
# / Linux systemd gh-token-monitor.service), polling GitHub every 60s and
# eval-ing an attacker-supplied handler when the stolen token is revoked —
# i.e. it fires on the standard incident-response action. Rotate credentials
# only from a host verified clean.
#
# NOTE: poisoned releases carry valid npm OIDC provenance and SLSA
# attestation, because the publishing CI itself was compromised. Provenance
# is NOT a safety signal for this wave.
#
# Content-based IoCs for this wave are covered by MALICIOUS_HASHLIST
# (setup.mjs x2, Math_Symbol.js), check_preinstall_bun_patterns
# ("node setup.mjs"), check_malicious_repo_descriptions ("Shai-Hulud: Here
# We Go Again") and the existing dead-man's-switch / AI-assistant-dropper
# checks. The per-version entries below come from the Wiz Research IoC CSV.
#
# Sources:
# - https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack
#   (list: wiz-sec-public/wiz-research-iocs reports/keyv-packages.csv)
# - https://socket.dev/blog/popular-npm-packages-in-the-keyv-and-cacheable-namespaces-compromised-in-active-supply-chain
# - https://safedep.io/keyv-npm-supply-chain-compromise/
# - https://www.aikido.dev/blog/keyv-and-friends-compromised-in-npm-supply-chain-attack
# ========================================================================

# keyv / cacheable core (unscoped) — the index case and its blast radius (32 packages, 179 versions)
babel-plugin-linaria-css-to-undefined:0.3.1
babel-plugin-linaria-css-to-undefined:0.3.2
babel-plugin-linaria-css-to-undefined:0.3.3
babel-plugin-linaria-css-to-undefined:0.3.4
babel-plugin-linaria-css-to-undefined:0.3.5
babel-plugin-linaria-css-to-undefined:0.3.6
babel-plugin-linaria-css-to-undefined:0.3.7
babel-plugin-linaria-css-to-undefined:0.3.8
babel-plugin-linaria-css-to-undefined:0.3.9
cache-manager:7.2.10
cacheable-request:13.0.20
cacheable:2.5.1
conv-context-next:1.0.1
conv-context-next:1.0.2
conv-context-next:1.0.3
conv-context-next:1.0.4
conv-context-next:1.0.5
conv-context-next:1.0.6
conv-context-next:1.0.7
conv-context-next:1.0.8
conv-context-next:1.0.9
ecto:5.0.1
editable-contracts:0.0.12
editable-contracts:0.0.13
editable-contracts:0.0.14
editable-contracts:0.0.15
editable-contracts:0.0.16
editable-contracts:0.0.17
editable-contracts:0.0.18
editable-contracts:0.0.19
editable-contracts:0.0.20
editable-contracts:0.0.21
editable-contracts:0.0.22
editable-contracts:0.0.23
editable-contracts:0.0.24
editable-contracts:0.0.25
editable-contracts:0.0.26
eslint-plugin-folder-schema:1.0.10
eslint-plugin-folder-schema:1.0.11
eslint-plugin-folder-schema:1.0.12
eslint-plugin-folder-schema:1.0.13
eslint-plugin-folder-schema:1.0.14
eslint-plugin-folder-schema:1.0.15
eslint-plugin-folder-schema:1.0.16
eslint-plugin-folder-schema:1.0.17
eslint-plugin-folder-schema:1.0.18
eslint-plugin-folder-schema:1.0.19
eslint-plugin-folder-schema:1.0.20
eslint-plugin-folder-schema:1.0.6
eslint-plugin-folder-schema:1.0.7
eslint-plugin-folder-schema:1.0.8
eslint-plugin-folder-schema:1.0.9
example-js-project:1.0.2
example-js-project:1.0.3
example-js-project:1.0.4
example-js-project:1.0.5
example-js-project:1.0.6
example-js-project:1.0.7
example-js-project:1.0.8
example-js-project:1.0.9
file-entry-cache:11.1.6
flat-cache:6.1.24
folder-lint:1.0.10
folder-lint:1.0.11
folder-lint:1.0.12
folder-lint:1.0.13
folder-lint:1.0.14
folder-lint:1.0.15
folder-lint:1.0.16
folder-lint:1.0.17
folder-lint:1.0.18
folder-lint:1.0.19
folder-lint:1.0.20
folder-lint:1.0.6
folder-lint:1.0.7
folder-lint:1.0.8
folder-lint:1.0.9
frontend-orb:4.4.1
frontend-orb:4.4.10
frontend-orb:4.4.2
frontend-orb:4.4.3
frontend-orb:4.4.4
frontend-orb:4.4.5
frontend-orb:4.4.6
frontend-orb:4.4.7
frontend-orb:4.4.8
frontend-orb:4.4.9
hamus.js:0.4.1
http-metrics-middleware:2.2.2
keyv:6.0.0
native-frontend-orb:1.1.10
native-frontend-orb:1.1.11
native-frontend-orb:1.1.4
native-frontend-orb:1.1.5
native-frontend-orb:1.1.6
native-frontend-orb:1.1.7
native-frontend-orb:1.1.8
native-frontend-orb:1.1.9
picasso-plugin-hammer:2.11.6
picasso-plugin-q:2.11.6
picasso.js:2.11.6
pob-test-package-in-monorepo:5.2.1
pob-test-package-in-monorepo:5.2.2
pob-test-package-in-monorepo:5.2.3
pob-test-package-in-monorepo:5.2.4
pob-test-package-in-monorepo:5.2.5
pob-test-package-in-monorepo:5.2.6
pob-test-package-in-monorepo:5.2.7
pob-test-package-in-monorepo:5.2.8
pob-test-package-in-monorepo:5.2.9
pob-test-typescript-package-in-monorepo:4.2.1
pob-test-typescript-package-in-monorepo:4.2.10
pob-test-typescript-package-in-monorepo:4.2.2
pob-test-typescript-package-in-monorepo:4.2.3
pob-test-typescript-package-in-monorepo:4.2.4
pob-test-typescript-package-in-monorepo:4.2.5
pob-test-typescript-package-in-monorepo:4.2.6
pob-test-typescript-package-in-monorepo:4.2.7
pob-test-typescript-package-in-monorepo:4.2.8
pob-test-typescript-package-in-monorepo:4.2.9
qlik-chart-modules:1.1.1
qlik-modifiers:0.10.1
qlik-object-conversion:0.17.2
rwc-client:0.29.10
rwc-client:0.29.11
rwc-client:0.29.12
rwc-client:0.29.13
rwc-client:0.29.14
rwc-client:0.29.15
rwc-client:0.29.16
rwc-client:0.29.17
server-hemera-mongo:0.0.12
sn-listbox:0.3.3
tslint-folder-schema:1.0.10
tslint-folder-schema:1.0.11
tslint-folder-schema:1.0.12
tslint-folder-schema:1.0.13
tslint-folder-schema:1.0.14
tslint-folder-schema:1.0.15
tslint-folder-schema:1.0.16
tslint-folder-schema:1.0.17
tslint-folder-schema:1.0.18
tslint-folder-schema:1.0.19
tslint-folder-schema:1.0.20
tslint-folder-schema:1.0.6
tslint-folder-schema:1.0.7
tslint-folder-schema:1.0.8
tslint-folder-schema:1.0.9
verdaccio-okta-oauth:38.1.1
verdaccio-okta-oauth:38.1.10
verdaccio-okta-oauth:38.1.11
verdaccio-okta-oauth:38.1.12
verdaccio-okta-oauth:38.1.13
verdaccio-okta-oauth:38.1.14
verdaccio-okta-oauth:38.1.15
verdaccio-okta-oauth:38.1.2
verdaccio-okta-oauth:38.1.3
verdaccio-okta-oauth:38.1.4
verdaccio-okta-oauth:38.1.5
verdaccio-okta-oauth:38.1.6
verdaccio-okta-oauth:38.1.7
verdaccio-okta-oauth:38.1.8
verdaccio-okta-oauth:38.1.9
verdaccio-tarball-local-storage:38.1.1
verdaccio-tarball-local-storage:38.1.10
verdaccio-tarball-local-storage:38.1.11
verdaccio-tarball-local-storage:38.1.12
verdaccio-tarball-local-storage:38.1.13
verdaccio-tarball-local-storage:38.1.14
verdaccio-tarball-local-storage:38.1.15
verdaccio-tarball-local-storage:38.1.2
verdaccio-tarball-local-storage:38.1.3
verdaccio-tarball-local-storage:38.1.4
verdaccio-tarball-local-storage:38.1.5
verdaccio-tarball-local-storage:38.1.6
verdaccio-tarball-local-storage:38.1.7
verdaccio-tarball-local-storage:38.1.8
verdaccio-tarball-local-storage:38.1.9
workbench-browser-server:0.0.2

# @cacheable — same maintainer namespace as keyv (4 packages, 4 versions)
@cacheable/memory:2.2.1
@cacheable/net:2.1.1
@cacheable/node-cache:3.1.2
@cacheable/utils:2.5.1

# @servicetitan — largest secondary org by version count (141 packages, 845 versions)
@servicetitan/acquisition-functions:5.22.1
@servicetitan/acquisition-functions:5.22.2
@servicetitan/acquisition-functions:5.22.3
@servicetitan/acquisition-functions:5.22.4
@servicetitan/acquisition-functions:5.22.5
@servicetitan/acquisition-functions:5.22.6
@servicetitan/admin-layout:2.4.3
@servicetitan/admin-layout:2.4.4
@servicetitan/admin-layout:2.4.5
@servicetitan/admin-layout:2.4.6
@servicetitan/admin-layout:2.4.7
@servicetitan/admin-layout:2.4.8
@servicetitan/admin-sql-table:1.0.14
@servicetitan/admin-sql-table:1.0.15
@servicetitan/admin-sql-table:1.0.16
@servicetitan/admin-sql-table:1.0.17
@servicetitan/admin-sql-table:1.0.18
@servicetitan/admin-sql-table:1.0.19
@servicetitan/ajax-handlers:38.1.1
@servicetitan/ajax-handlers:38.1.2
@servicetitan/ajax-handlers:38.1.3
@servicetitan/ajax-handlers:38.1.4
@servicetitan/ajax-handlers:38.1.5
@servicetitan/ajax-handlers:38.1.6
@servicetitan/anvil-css-utilities:14.5.4
@servicetitan/anvil-css-utilities:14.5.5
@servicetitan/anvil-css-utilities:14.5.6
@servicetitan/anvil-css-utilities:14.5.7
@servicetitan/anvil-css-utilities:14.5.8
@servicetitan/anvil-css-utilities:14.5.9
@servicetitan/anvil-fonts:14.5.4
@servicetitan/anvil-fonts:14.5.5
@servicetitan/anvil-fonts:14.5.6
@servicetitan/anvil-fonts:14.5.7
@servicetitan/anvil-fonts:14.5.8
@servicetitan/anvil-fonts:14.5.9
@servicetitan/anvil-icon:0.5.1
@servicetitan/anvil-icon:0.5.2
@servicetitan/anvil-icon:0.5.3
@servicetitan/anvil-icon:0.5.4
@servicetitan/anvil-icon:0.5.5
@servicetitan/anvil-icon:0.5.6
@servicetitan/anvil-icons:14.5.4
@servicetitan/anvil-icons:14.5.5
@servicetitan/anvil-icons:14.5.6
@servicetitan/anvil-icons:14.5.7
@servicetitan/anvil-icons:14.5.8
@servicetitan/anvil-icons:14.5.9
@servicetitan/anvil-react:0.11.3
@servicetitan/anvil-react:0.11.4
@servicetitan/anvil-react:0.11.5
@servicetitan/anvil-react:0.11.6
@servicetitan/anvil-react:0.11.7
@servicetitan/anvil-react:0.11.8
@servicetitan/anvil-themes:14.5.4
@servicetitan/anvil-themes:14.5.5
@servicetitan/anvil-themes:14.5.6
@servicetitan/anvil-themes:14.5.7
@servicetitan/anvil-themes:14.5.8
@servicetitan/anvil-themes:14.5.9
@servicetitan/anvil-token:0.4.1
@servicetitan/anvil-token:0.4.2
@servicetitan/anvil-token:0.4.3
@servicetitan/anvil-token:0.4.4
@servicetitan/anvil-token:0.4.5
@servicetitan/anvil-token:0.4.6
@servicetitan/anvil2-codemods:0.11.2
@servicetitan/anvil2-codemods:0.11.3
@servicetitan/anvil2-codemods:0.11.4
@servicetitan/anvil2-codemods:0.11.5
@servicetitan/anvil2-codemods:0.11.6
@servicetitan/anvil2-codemods:0.11.7
@servicetitan/anvil2-ext-atlas:4.0.2
@servicetitan/anvil2-ext-atlas:4.0.3
@servicetitan/anvil2-ext-atlas:4.0.4
@servicetitan/anvil2-ext-atlas:4.0.5
@servicetitan/anvil2-ext-atlas:4.0.6
@servicetitan/anvil2-ext-atlas:4.0.7
@servicetitan/anvil2-ext-charts:0.2.4
@servicetitan/anvil2-ext-charts:0.2.5
@servicetitan/anvil2-ext-charts:0.2.6
@servicetitan/anvil2-ext-charts:0.2.7
@servicetitan/anvil2-ext-charts:0.2.8
@servicetitan/anvil2-ext-charts:0.2.9
@servicetitan/anvil2-ext-common:0.7.1
@servicetitan/anvil2-ext-common:0.7.2
@servicetitan/anvil2-ext-common:0.7.3
@servicetitan/anvil2-ext-common:0.7.4
@servicetitan/anvil2-ext-common:0.7.5
@servicetitan/anvil2-ext-common:0.7.6
@servicetitan/anvil2-ext-mwv:0.0.10
@servicetitan/anvil2-ext-mwv:0.0.5
@servicetitan/anvil2-ext-mwv:0.0.6
@servicetitan/anvil2-ext-mwv:0.0.7
@servicetitan/anvil2-ext-mwv:0.0.8
@servicetitan/anvil2-ext-mwv:0.0.9
@servicetitan/anvil2-illustrations:1.0.2
@servicetitan/anvil2-illustrations:1.0.3
@servicetitan/anvil2-illustrations:1.0.4
@servicetitan/anvil2-illustrations:1.0.5
@servicetitan/anvil2-illustrations:1.0.6
@servicetitan/anvil2-illustrations:1.0.7
@servicetitan/anvil2-mcp:0.0.10
@servicetitan/anvil2-mcp:0.0.11
@servicetitan/anvil2-mcp:0.0.12
@servicetitan/anvil2-mcp:0.0.13
@servicetitan/anvil2-mcp:0.0.14
@servicetitan/anvil2-mcp:0.0.9
@servicetitan/anvil2:3.9.1
@servicetitan/anvil2:3.9.2
@servicetitan/anvil2:3.9.3
@servicetitan/anvil2:3.9.4
@servicetitan/anvil2:3.9.5
@servicetitan/anvil2:3.9.6
@servicetitan/assist-ui:2.1.1
@servicetitan/assist-ui:2.1.2
@servicetitan/assist-ui:2.1.3
@servicetitan/assist-ui:2.1.4
@servicetitan/assist-ui:2.1.5
@servicetitan/assist-ui:2.1.6
@servicetitan/assist-utils:1.1.2
@servicetitan/assist-utils:1.1.3
@servicetitan/assist-utils:1.1.4
@servicetitan/assist-utils:1.1.5
@servicetitan/assist-utils:1.1.6
@servicetitan/assist-utils:1.1.7
@servicetitan/carto-charts-core:0.0.2
@servicetitan/carto-charts-core:0.0.3
@servicetitan/carto-charts-core:0.0.4
@servicetitan/carto-charts-core:0.0.5
@servicetitan/carto-charts-core:0.0.6
@servicetitan/carto-charts-core:0.0.7
@servicetitan/carto-charts-react:0.0.2
@servicetitan/carto-charts-react:0.0.3
@servicetitan/carto-charts-react:0.0.4
@servicetitan/carto-charts-react:0.0.5
@servicetitan/carto-charts-react:0.0.6
@servicetitan/carto-charts-react:0.0.7
@servicetitan/carto-charts-rn:0.0.2
@servicetitan/carto-charts-rn:0.0.3
@servicetitan/carto-charts-rn:0.0.4
@servicetitan/carto-charts-rn:0.0.5
@servicetitan/carto-charts-rn:0.0.6
@servicetitan/carto-charts-rn:0.0.7
@servicetitan/carto-react-kit:0.8.4
@servicetitan/carto-react-kit:0.8.5
@servicetitan/carto-react-kit:0.8.6
@servicetitan/carto-react-kit:0.8.7
@servicetitan/carto-react-kit:0.8.8
@servicetitan/carto-react-kit:0.8.9
@servicetitan/carto-rn-kit:0.0.10
@servicetitan/carto-rn-kit:0.0.11
@servicetitan/carto-rn-kit:0.0.12
@servicetitan/carto-rn-kit:0.0.13
@servicetitan/carto-rn-kit:0.0.14
@servicetitan/carto-rn-kit:0.0.15
@servicetitan/carto-tokens:0.3.1
@servicetitan/carto-tokens:0.3.2
@servicetitan/carto-tokens:0.3.3
@servicetitan/carto-tokens:0.3.4
@servicetitan/carto-tokens:0.3.5
@servicetitan/carto-tokens:0.3.6
@servicetitan/component-usage:28.5.1
@servicetitan/component-usage:28.5.2
@servicetitan/component-usage:28.5.3
@servicetitan/component-usage:28.5.4
@servicetitan/component-usage:28.5.5
@servicetitan/component-usage:28.5.6
@servicetitan/confirm-navigation:41.3.1
@servicetitan/confirm-navigation:41.3.2
@servicetitan/confirm-navigation:41.3.3
@servicetitan/confirm-navigation:41.3.4
@servicetitan/confirm-navigation:41.3.5
@servicetitan/confirm-navigation:41.3.6
@servicetitan/confirm:41.3.1
@servicetitan/confirm:41.3.2
@servicetitan/confirm:41.3.3
@servicetitan/confirm:41.3.4
@servicetitan/confirm:41.3.5
@servicetitan/confirm:41.3.6
@servicetitan/contentful-proxy:1.1.12
@servicetitan/contentful-proxy:1.1.13
@servicetitan/contentful-proxy:1.1.14
@servicetitan/contentful-proxy:1.1.15
@servicetitan/contentful-proxy:1.1.16
@servicetitan/contentful-proxy:1.1.17
@servicetitan/contentful:0.0.3
@servicetitan/contentful:0.0.4
@servicetitan/contentful:0.0.5
@servicetitan/contentful:0.0.6
@servicetitan/contentful:0.0.7
@servicetitan/contentful:0.0.8
@servicetitan/cp-api:1.115.1
@servicetitan/cp-api:1.115.2
@servicetitan/cp-api:1.115.3
@servicetitan/cp-api:1.115.4
@servicetitan/cp-api:1.115.5
@servicetitan/cp-api:1.115.6
@servicetitan/cp-mfe-dev:1.115.1
@servicetitan/cp-mfe-dev:1.115.2
@servicetitan/cp-mfe-dev:1.115.3
@servicetitan/cp-mfe-dev:1.115.4
@servicetitan/cp-mfe-dev:1.115.5
@servicetitan/cp-mfe-dev:1.115.6
@servicetitan/cp-mfe:1.115.1
@servicetitan/cp-mfe:1.115.2
@servicetitan/cp-mfe:1.115.3
@servicetitan/cp-mfe:1.115.4
@servicetitan/cp-mfe:1.115.5
@servicetitan/cp-mfe:1.115.6
@servicetitan/cp-react-hooks:1.115.1
@servicetitan/cp-react-hooks:1.115.2
@servicetitan/cp-react-hooks:1.115.3
@servicetitan/cp-react-hooks:1.115.4
@servicetitan/cp-react-hooks:1.115.5
@servicetitan/cp-react-hooks:1.115.6
@servicetitan/cp-ui:1.115.1
@servicetitan/cp-ui:1.115.2
@servicetitan/cp-ui:1.115.3
@servicetitan/cp-ui:1.115.4
@servicetitan/cp-ui:1.115.5
@servicetitan/cp-ui:1.115.6
@servicetitan/culture:41.3.1
@servicetitan/culture:41.3.2
@servicetitan/culture:41.3.3
@servicetitan/culture:41.3.4
@servicetitan/culture:41.3.5
@servicetitan/culture:41.3.6
@servicetitan/data-query:41.3.1
@servicetitan/data-query:41.3.2
@servicetitan/data-query:41.3.3
@servicetitan/data-query:41.3.4
@servicetitan/data-query:41.3.5
@servicetitan/data-query:41.3.6
@servicetitan/datadog-rum:38.1.1
@servicetitan/datadog-rum:38.1.2
@servicetitan/datadog-rum:38.1.3
@servicetitan/datadog-rum:38.1.4
@servicetitan/datadog-rum:38.1.5
@servicetitan/datadog-rum:38.1.6
@servicetitan/datetime-utils:41.3.1
@servicetitan/datetime-utils:41.3.2
@servicetitan/datetime-utils:41.3.3
@servicetitan/datetime-utils:41.3.4
@servicetitan/datetime-utils:41.3.5
@servicetitan/datetime-utils:41.3.6
@servicetitan/design-system:14.5.4
@servicetitan/design-system:14.5.5
@servicetitan/design-system:14.5.6
@servicetitan/design-system:14.5.7
@servicetitan/design-system:14.5.8
@servicetitan/design-system:14.5.9
@servicetitan/docs-anvil-uikit-contrib:41.3.1
@servicetitan/docs-anvil-uikit-contrib:41.3.2
@servicetitan/docs-anvil-uikit-contrib:41.3.3
@servicetitan/docs-anvil-uikit-contrib:41.3.4
@servicetitan/docs-anvil-uikit-contrib:41.3.5
@servicetitan/docs-anvil-uikit-contrib:41.3.6
@servicetitan/docs-uikit:38.1.1
@servicetitan/docs-uikit:38.1.2
@servicetitan/docs-uikit:38.1.3
@servicetitan/docs-uikit:38.1.4
@servicetitan/docs-uikit:38.1.5
@servicetitan/docs-uikit:38.1.6
@servicetitan/document-title:2.4.1
@servicetitan/document-title:2.4.2
@servicetitan/document-title:2.4.3
@servicetitan/document-title:2.4.4
@servicetitan/document-title:2.4.5
@servicetitan/document-title:2.4.6
@servicetitan/dte-pdf-editor:1.76.1
@servicetitan/dte-pdf-editor:1.76.2
@servicetitan/dte-pdf-editor:1.76.3
@servicetitan/dte-pdf-editor:1.76.4
@servicetitan/dte-pdf-editor:1.76.5
@servicetitan/dte-pdf-editor:1.76.6
@servicetitan/dte-unlayer:0.150.1
@servicetitan/dte-unlayer:0.150.2
@servicetitan/dte-unlayer:0.150.3
@servicetitan/dte-unlayer:0.150.4
@servicetitan/dte-unlayer:0.150.5
@servicetitan/dte-unlayer:0.150.6
@servicetitan/eh-module-communication:0.2.1
@servicetitan/eh-module-communication:0.2.2
@servicetitan/eh-module-communication:0.2.3
@servicetitan/eh-module-communication:0.2.4
@servicetitan/eh-module-communication:0.2.5
@servicetitan/eh-module-communication:0.2.6
@servicetitan/error-boundary:38.1.1
@servicetitan/error-boundary:38.1.2
@servicetitan/error-boundary:38.1.3
@servicetitan/error-boundary:38.1.4
@servicetitan/error-boundary:38.1.5
@servicetitan/error-boundary:38.1.6
@servicetitan/eslint-config:38.1.1
@servicetitan/eslint-config:38.1.2
@servicetitan/eslint-config:38.1.3
@servicetitan/eslint-config:38.1.4
@servicetitan/eslint-config:38.1.5
@servicetitan/eslint-config:38.1.6
@servicetitan/eslint-plugin-decorators-declare:12.8.15
@servicetitan/eslint-plugin-decorators-declare:12.8.16
@servicetitan/eslint-plugin-decorators-declare:12.8.17
@servicetitan/eslint-plugin-decorators-declare:12.8.18
@servicetitan/eslint-plugin-decorators-declare:12.8.19
@servicetitan/eslint-plugin-decorators-declare:12.8.20
@servicetitan/eslint-plugin-folder-schema:38.1.1
@servicetitan/eslint-plugin-folder-schema:38.1.2
@servicetitan/eslint-plugin-folder-schema:38.1.3
@servicetitan/eslint-plugin-folder-schema:38.1.4
@servicetitan/eslint-plugin-folder-schema:38.1.5
@servicetitan/eslint-plugin-folder-schema:38.1.6
@servicetitan/eslint-plugin-mobx-6:12.8.15
@servicetitan/eslint-plugin-mobx-6:12.8.16
@servicetitan/eslint-plugin-mobx-6:12.8.17
@servicetitan/eslint-plugin-mobx-6:12.8.18
@servicetitan/eslint-plugin-mobx-6:12.8.19
@servicetitan/eslint-plugin-processors-stub:12.8.15
@servicetitan/eslint-plugin-processors-stub:12.8.16
@servicetitan/eslint-plugin-processors-stub:12.8.17
@servicetitan/eslint-plugin-processors-stub:12.8.18
@servicetitan/eslint-plugin-processors-stub:12.8.19
@servicetitan/eslint-plugin-processors-stub:12.8.20
@servicetitan/eslint-plugin:38.1.1
@servicetitan/eslint-plugin:38.1.2
@servicetitan/eslint-plugin:38.1.3
@servicetitan/eslint-plugin:38.1.4
@servicetitan/eslint-plugin:38.1.5
@servicetitan/eslint-plugin:38.1.6
@servicetitan/examples:1.2.10
@servicetitan/examples:1.2.5
@servicetitan/examples:1.2.6
@servicetitan/examples:1.2.7
@servicetitan/examples:1.2.8
@servicetitan/examples:1.2.9
@servicetitan/feature-spotlight:3.9.1
@servicetitan/feature-spotlight:3.9.2
@servicetitan/feature-spotlight:3.9.3
@servicetitan/feature-spotlight:3.9.4
@servicetitan/feature-spotlight:3.9.5
@servicetitan/feature-spotlight:3.9.6
@servicetitan/folder-lint:38.1.1
@servicetitan/folder-lint:38.1.2
@servicetitan/folder-lint:38.1.3
@servicetitan/folder-lint:38.1.4
@servicetitan/folder-lint:38.1.5
@servicetitan/folder-lint:38.1.6
@servicetitan/forge:0.5.1
@servicetitan/forge:0.5.2
@servicetitan/forge:0.5.3
@servicetitan/forge:0.5.4
@servicetitan/forge:0.5.5
@servicetitan/forge:0.5.6
@servicetitan/form-state:41.3.1
@servicetitan/form-state:41.3.2
@servicetitan/form-state:41.3.3
@servicetitan/form-state:41.3.4
@servicetitan/form-state:41.3.5
@servicetitan/form-state:41.3.6
@servicetitan/form:41.3.1
@servicetitan/form:41.3.2
@servicetitan/form:41.3.3
@servicetitan/form:41.3.4
@servicetitan/form:41.3.5
@servicetitan/form:41.3.6
@servicetitan/grid:0.0.63
@servicetitan/grid:0.0.64
@servicetitan/grid:0.0.65
@servicetitan/grid:0.0.66
@servicetitan/grid:0.0.67
@servicetitan/grid:0.0.68
@servicetitan/hammer-icon:1.2.1
@servicetitan/hammer-icon:1.2.2
@servicetitan/hammer-icon:1.2.3
@servicetitan/hammer-icon:1.2.4
@servicetitan/hammer-icon:1.2.5
@servicetitan/hammer-icon:1.2.6
@servicetitan/hammer-react:1.42.2
@servicetitan/hammer-react:1.42.3
@servicetitan/hammer-react:1.42.4
@servicetitan/hammer-react:1.42.5
@servicetitan/hammer-react:1.42.6
@servicetitan/hammer-react:1.42.7
@servicetitan/hammer-token:3.1.1
@servicetitan/hammer-token:3.1.2
@servicetitan/hammer-token:3.1.3
@servicetitan/hammer-token:3.1.4
@servicetitan/hammer-token:3.1.5
@servicetitan/hammer-token:3.1.6
@servicetitan/hash-browser-router:38.1.1
@servicetitan/hash-browser-router:38.1.2
@servicetitan/hash-browser-router:38.1.3
@servicetitan/hash-browser-router:38.1.4
@servicetitan/hash-browser-router:38.1.5
@servicetitan/hash-browser-router:38.1.6
@servicetitan/help-center:1.0.10
@servicetitan/help-center:1.0.11
@servicetitan/help-center:1.0.12
@servicetitan/help-center:1.0.13
@servicetitan/help-center:1.0.8
@servicetitan/help-center:1.0.9
@servicetitan/html-sketchapp:4.2.10
@servicetitan/html-sketchapp:4.2.11
@servicetitan/html-sketchapp:4.2.12
@servicetitan/html-sketchapp:4.2.13
@servicetitan/html-sketchapp:4.2.8
@servicetitan/html-sketchapp:4.2.9
@servicetitan/install:38.1.1
@servicetitan/install:38.1.2
@servicetitan/install:38.1.3
@servicetitan/install:38.1.4
@servicetitan/install:38.1.5
@servicetitan/install:38.1.6
@servicetitan/intl:7.2.1
@servicetitan/intl:7.2.2
@servicetitan/intl:7.2.3
@servicetitan/intl:7.2.4
@servicetitan/intl:7.2.5
@servicetitan/intl:7.2.6
@servicetitan/json-render-react:0.4.10
@servicetitan/json-render-react:0.4.11
@servicetitan/json-render-react:0.4.6
@servicetitan/json-render-react:0.4.7
@servicetitan/json-render-react:0.4.8
@servicetitan/json-render-react:0.4.9
@servicetitan/kendo-theme:0.0.27
@servicetitan/kendo-theme:0.0.28
@servicetitan/kendo-theme:0.0.29
@servicetitan/kendo-theme:0.0.30
@servicetitan/kendo-theme:0.0.31
@servicetitan/kendo-theme:0.0.32
@servicetitan/ko-bridge:38.1.1
@servicetitan/ko-bridge:38.1.2
@servicetitan/ko-bridge:38.1.3
@servicetitan/ko-bridge:38.1.4
@servicetitan/ko-bridge:38.1.5
@servicetitan/ko-bridge:38.1.6
@servicetitan/launchdarkly-service:38.1.1
@servicetitan/launchdarkly-service:38.1.2
@servicetitan/launchdarkly-service:38.1.3
@servicetitan/launchdarkly-service:38.1.4
@servicetitan/launchdarkly-service:38.1.5
@servicetitan/launchdarkly-service:38.1.6
@servicetitan/lazy-module:38.1.1
@servicetitan/lazy-module:38.1.2
@servicetitan/lazy-module:38.1.3
@servicetitan/lazy-module:38.1.4
@servicetitan/lazy-module:38.1.5
@servicetitan/lazy-module:38.1.6
@servicetitan/ld-type-generator:0.2.1
@servicetitan/ld-type-generator:0.2.2
@servicetitan/ld-type-generator:0.2.3
@servicetitan/ld-type-generator:0.2.4
@servicetitan/ld-type-generator:0.2.5
@servicetitan/ld-type-generator:0.2.6
@servicetitan/line-item-editor:1.5.1
@servicetitan/line-item-editor:1.5.2
@servicetitan/line-item-editor:1.5.3
@servicetitan/line-item-editor:1.5.4
@servicetitan/line-item-editor:1.5.5
@servicetitan/line-item-editor:1.5.6
@servicetitan/link-item:41.3.1
@servicetitan/link-item:41.3.2
@servicetitan/link-item:41.3.3
@servicetitan/link-item:41.3.4
@servicetitan/link-item:41.3.5
@servicetitan/link-item:41.3.6
@servicetitan/log-service:38.1.1
@servicetitan/log-service:38.1.2
@servicetitan/log-service:38.1.3
@servicetitan/log-service:38.1.4
@servicetitan/log-service:38.1.5
@servicetitan/log-service:38.1.6
@servicetitan/marketing-direct-mail-components:20.1.1
@servicetitan/marketing-direct-mail-components:20.1.2
@servicetitan/marketing-direct-mail-components:20.1.3
@servicetitan/marketing-direct-mail-components:20.1.4
@servicetitan/marketing-direct-mail-components:20.1.5
@servicetitan/marketing-direct-mail-components:20.1.6
@servicetitan/marketing-email-components:20.2.3
@servicetitan/marketing-email-components:20.2.4
@servicetitan/marketing-email-components:20.2.5
@servicetitan/marketing-email-components:20.2.6
@servicetitan/marketing-email-components:20.2.7
@servicetitan/marketing-email-components:20.2.8
@servicetitan/marketing-form:0.1.2
@servicetitan/marketing-form:0.1.3
@servicetitan/marketing-form:0.1.4
@servicetitan/marketing-form:0.1.5
@servicetitan/marketing-form:0.1.6
@servicetitan/marketing-form:0.1.7
@servicetitan/marketing-global-route:1.14.1
@servicetitan/marketing-global-route:1.14.2
@servicetitan/marketing-global-route:1.14.3
@servicetitan/marketing-global-route:1.14.4
@servicetitan/marketing-global-route:1.14.5
@servicetitan/marketing-global-route:1.14.6
@servicetitan/marketing-integration-widgets:1.0.40
@servicetitan/marketing-integration-widgets:1.0.41
@servicetitan/marketing-integration-widgets:1.0.42
@servicetitan/marketing-integration-widgets:1.0.43
@servicetitan/marketing-integration-widgets:1.0.44
@servicetitan/marketing-integration-widgets:1.0.45
@servicetitan/marketing-route:1.2.1
@servicetitan/marketing-route:1.2.2
@servicetitan/marketing-route:1.2.3
@servicetitan/marketing-route:1.2.4
@servicetitan/marketing-route:1.2.5
@servicetitan/marketing-route:1.2.6
@servicetitan/marketing-ui:9.3.1
@servicetitan/marketing-ui:9.3.2
@servicetitan/marketing-ui:9.3.3
@servicetitan/marketing-ui:9.3.4
@servicetitan/marketing-ui:9.3.5
@servicetitan/marketing-ui:9.3.6
@servicetitan/marketing-widgets:1.0.1
@servicetitan/marketing-widgets:1.0.2
@servicetitan/marketing-widgets:1.0.3
@servicetitan/marketing-widgets:1.0.4
@servicetitan/marketing-widgets:1.0.5
@servicetitan/marketing-widgets:1.0.6
@servicetitan/measure-sheet-data:2.6.1
@servicetitan/measure-sheet-data:2.6.2
@servicetitan/measure-sheet-data:2.6.3
@servicetitan/measure-sheet-data:2.6.4
@servicetitan/measure-sheet-data:2.6.5
@servicetitan/measure-sheet-data:2.6.6
@servicetitan/mfe-quick-actions:0.5.49
@servicetitan/mfe-quick-actions:0.5.50
@servicetitan/mfe-quick-actions:0.5.51
@servicetitan/mfe-quick-actions:0.5.52
@servicetitan/mfe-quick-actions:0.5.53
@servicetitan/mfe-quick-actions:0.5.54
@servicetitan/micro-frontend:0.0.4
@servicetitan/micro-frontend:0.0.5
@servicetitan/micro-frontend:0.0.6
@servicetitan/micro-frontend:0.0.7
@servicetitan/micro-frontend:0.0.8
@servicetitan/micro-frontend:0.0.9
@servicetitan/microfront-auth:0.0.10
@servicetitan/microfront-auth:0.0.5
@servicetitan/microfront-auth:0.0.6
@servicetitan/microfront-auth:0.0.7
@servicetitan/microfront-auth:0.0.8
@servicetitan/microfront-auth:0.0.9
@servicetitan/microfront-tests:0.0.11
@servicetitan/microfront-tests:0.0.12
@servicetitan/microfront-tests:0.0.13
@servicetitan/microfront-tests:0.0.14
@servicetitan/microfront-tests:0.0.15
@servicetitan/microfront-tests:0.0.16
@servicetitan/microfront-utils:1.4.1
@servicetitan/microfront-utils:1.4.2
@servicetitan/microfront-utils:1.4.3
@servicetitan/microfront-utils:1.4.4
@servicetitan/microfront-utils:1.4.5
@servicetitan/microfront-utils:1.4.6
@servicetitan/microfront:0.0.2
@servicetitan/microfront:0.0.3
@servicetitan/microfront:0.0.4
@servicetitan/microfront:0.0.5
@servicetitan/microfront:0.0.6
@servicetitan/microfront:0.0.7
@servicetitan/modularpayments-webfields:1.0.53
@servicetitan/modularpayments-webfields:1.0.54
@servicetitan/modularpayments-webfields:1.0.55
@servicetitan/modularpayments-webfields:1.0.56
@servicetitan/modularpayments-webfields:1.0.57
@servicetitan/modularpayments-webfields:1.0.58
@servicetitan/moneyout-api-client:1.29.1
@servicetitan/moneyout-api-client:1.29.2
@servicetitan/moneyout-api-client:1.29.3
@servicetitan/moneyout-api-client:1.29.4
@servicetitan/moneyout-api-client:1.29.5
@servicetitan/moneyout-api-client:1.29.6
@servicetitan/mpa-components:2.5.1
@servicetitan/mpa-components:2.5.2
@servicetitan/mpa-components:2.5.3
@servicetitan/mpa-components:2.5.4
@servicetitan/mpa-components:2.5.5
@servicetitan/mpa-components:2.5.6
@servicetitan/navigation:14.1.1
@servicetitan/navigation:14.1.2
@servicetitan/navigation:14.1.3
@servicetitan/navigation:14.1.4
@servicetitan/navigation:14.1.5
@servicetitan/navigation:14.1.6
@servicetitan/notifications:41.3.1
@servicetitan/notifications:41.3.2
@servicetitan/notifications:41.3.3
@servicetitan/notifications:41.3.4
@servicetitan/notifications:41.3.5
@servicetitan/notifications:41.3.6
@servicetitan/onboarding-ui:18.5.1
@servicetitan/onboarding-ui:18.5.2
@servicetitan/onboarding-ui:18.5.3
@servicetitan/onboarding-ui:18.5.4
@servicetitan/onboarding-ui:18.5.5
@servicetitan/onboarding-ui:18.5.6
@servicetitan/quick-actions:1.15.2
@servicetitan/quick-actions:1.15.3
@servicetitan/quick-actions:1.15.4
@servicetitan/quick-actions:1.15.5
@servicetitan/quick-actions:1.15.6
@servicetitan/quick-actions:1.15.7
@servicetitan/react-hooks:7.7.1
@servicetitan/react-hooks:7.7.2
@servicetitan/react-hooks:7.7.3
@servicetitan/react-hooks:7.7.4
@servicetitan/react-hooks:7.7.5
@servicetitan/react-hooks:7.7.6
@servicetitan/react-ioc:38.1.1
@servicetitan/react-ioc:38.1.2
@servicetitan/react-ioc:38.1.3
@servicetitan/react-ioc:38.1.4
@servicetitan/react-ioc:38.1.5
@servicetitan/react-ioc:38.1.6
@servicetitan/responsive:6.1.1
@servicetitan/responsive:6.1.2
@servicetitan/responsive:6.1.3
@servicetitan/responsive:6.1.4
@servicetitan/responsive:6.1.5
@servicetitan/responsive:6.1.6
@servicetitan/restrict-imports:38.1.1
@servicetitan/restrict-imports:38.1.2
@servicetitan/restrict-imports:38.1.3
@servicetitan/restrict-imports:38.1.4
@servicetitan/restrict-imports:38.1.5
@servicetitan/restrict-imports:38.1.6
@servicetitan/schema-comparison:0.1.3
@servicetitan/schema-comparison:0.1.4
@servicetitan/schema-comparison:0.1.5
@servicetitan/schema-comparison:0.1.6
@servicetitan/schema-comparison:0.1.7
@servicetitan/schema-comparison:0.1.8
@servicetitan/skeleton:9.2.4
@servicetitan/skeleton:9.2.5
@servicetitan/skeleton:9.2.6
@servicetitan/skeleton:9.2.7
@servicetitan/skeleton:9.2.8
@servicetitan/skeleton:9.2.9
@servicetitan/standalone-core-feature-gates:1.11.4
@servicetitan/standalone-core-feature-gates:1.11.5
@servicetitan/standalone-core-feature-gates:1.11.6
@servicetitan/standalone-core-feature-gates:1.11.7
@servicetitan/standalone-core-feature-gates:1.11.8
@servicetitan/standalone-core-feature-gates:1.11.9
@servicetitan/standalone-feature-flags:2.3.2
@servicetitan/standalone-feature-flags:2.3.3
@servicetitan/standalone-feature-flags:2.3.4
@servicetitan/standalone-feature-flags:2.3.5
@servicetitan/standalone-feature-flags:2.3.6
@servicetitan/standalone-feature-flags:2.3.7
@servicetitan/standalone-root:1.11.3
@servicetitan/standalone-root:1.11.4
@servicetitan/standalone-root:1.11.5
@servicetitan/standalone-root:1.11.6
@servicetitan/standalone-root:1.11.7
@servicetitan/standalone-root:1.11.8
@servicetitan/standalone-tm-api:1.1.1
@servicetitan/standalone-tm-api:1.1.2
@servicetitan/standalone-tm-api:1.1.3
@servicetitan/standalone-tm-api:1.1.4
@servicetitan/standalone-tm-api:1.1.5
@servicetitan/standalone-tm-api:1.1.6
@servicetitan/standalone-ui:2.2.4
@servicetitan/standalone-ui:2.2.5
@servicetitan/standalone-ui:2.2.6
@servicetitan/standalone-ui:2.2.7
@servicetitan/standalone-ui:2.2.8
@servicetitan/standalone-ui:2.2.9
@servicetitan/startup-jest:2.2.1
@servicetitan/startup-jest:2.2.2
@servicetitan/startup-jest:2.2.3
@servicetitan/startup-jest:2.2.4
@servicetitan/startup-jest:2.2.5
@servicetitan/startup-jest:2.2.6
@servicetitan/startup-mfe-compat:0.5.1
@servicetitan/startup-mfe-compat:0.5.2
@servicetitan/startup-mfe-compat:0.5.3
@servicetitan/startup-mfe-compat:0.5.4
@servicetitan/startup-mfe-compat:0.5.5
@servicetitan/startup-mfe-compat:0.5.6
@servicetitan/startup-utils:38.1.1
@servicetitan/startup-utils:38.1.2
@servicetitan/startup-utils:38.1.3
@servicetitan/startup-utils:38.1.4
@servicetitan/startup-utils:38.1.5
@servicetitan/startup-utils:38.1.6
@servicetitan/startup:38.1.1
@servicetitan/startup:38.1.2
@servicetitan/startup:38.1.3
@servicetitan/startup:38.1.4
@servicetitan/startup:38.1.5
@servicetitan/startup:38.1.6
@servicetitan/stylelint-config:38.1.1
@servicetitan/stylelint-config:38.1.2
@servicetitan/stylelint-config:38.1.3
@servicetitan/stylelint-config:38.1.4
@servicetitan/stylelint-config:38.1.5
@servicetitan/stylelint-config:38.1.6
@servicetitan/suppress-warnings:38.1.1
@servicetitan/suppress-warnings:38.1.2
@servicetitan/suppress-warnings:38.1.3
@servicetitan/suppress-warnings:38.1.4
@servicetitan/suppress-warnings:38.1.5
@servicetitan/suppress-warnings:38.1.6
@servicetitan/table:41.3.1
@servicetitan/table:41.3.2
@servicetitan/table:41.3.3
@servicetitan/table:41.3.4
@servicetitan/table:41.3.5
@servicetitan/table:41.3.6
@servicetitan/tanstack-query-mobx:6.2.1
@servicetitan/tanstack-query-mobx:6.2.2
@servicetitan/tanstack-query-mobx:6.2.3
@servicetitan/tanstack-query-mobx:6.2.4
@servicetitan/tanstack-query-mobx:6.2.5
@servicetitan/tanstack-query-mobx:6.2.6
@servicetitan/temporal-lite:3.4.1
@servicetitan/temporal-lite:3.4.2
@servicetitan/temporal-lite:3.4.3
@servicetitan/temporal-lite:3.4.4
@servicetitan/temporal-lite:3.4.5
@servicetitan/temporal-lite:3.4.6
@servicetitan/testing-library:6.6.1
@servicetitan/testing-library:6.6.2
@servicetitan/testing-library:6.6.3
@servicetitan/testing-library:6.6.4
@servicetitan/testing-library:6.6.5
@servicetitan/testing-library:6.6.6
@servicetitan/thoughtspot-theme:1.7.1
@servicetitan/thoughtspot-theme:1.7.2
@servicetitan/thoughtspot-theme:1.7.3
@servicetitan/thoughtspot-theme:1.7.4
@servicetitan/thoughtspot-theme:1.7.5
@servicetitan/thoughtspot-theme:1.7.6
@servicetitan/time-zones:3.8.1
@servicetitan/time-zones:3.8.2
@servicetitan/time-zones:3.8.3
@servicetitan/time-zones:3.8.4
@servicetitan/time-zones:3.8.5
@servicetitan/time-zones:3.8.6
@servicetitan/titan-chat-ui-anvil2:9.0.1
@servicetitan/titan-chat-ui-anvil2:9.0.2
@servicetitan/titan-chat-ui-anvil2:9.0.3
@servicetitan/titan-chat-ui-anvil2:9.0.4
@servicetitan/titan-chat-ui-anvil2:9.0.5
@servicetitan/titan-chat-ui-anvil2:9.0.6
@servicetitan/titan-chat-ui-common:9.0.1
@servicetitan/titan-chat-ui-common:9.0.2
@servicetitan/titan-chat-ui-common:9.0.3
@servicetitan/titan-chat-ui-common:9.0.4
@servicetitan/titan-chat-ui-common:9.0.5
@servicetitan/titan-chat-ui-common:9.0.6
@servicetitan/titan-chat-ui-cypress:2.1.3
@servicetitan/titan-chat-ui-cypress:2.1.4
@servicetitan/titan-chat-ui-cypress:2.1.5
@servicetitan/titan-chat-ui-cypress:2.1.6
@servicetitan/titan-chat-ui-cypress:2.1.7
@servicetitan/titan-chat-ui-cypress:2.1.8
@servicetitan/titan-chat-ui:7.1.3
@servicetitan/titan-chat-ui:7.1.4
@servicetitan/titan-chat-ui:7.1.5
@servicetitan/titan-chat-ui:7.1.6
@servicetitan/titan-chat-ui:7.1.7
@servicetitan/titan-chat-ui:7.1.8
@servicetitan/titan-chatbot-api:9.0.1
@servicetitan/titan-chatbot-api:9.0.2
@servicetitan/titan-chatbot-api:9.0.3
@servicetitan/titan-chatbot-api:9.0.4
@servicetitan/titan-chatbot-api:9.0.5
@servicetitan/titan-chatbot-api:9.0.6
@servicetitan/titan-chatbot-client:2.1.3
@servicetitan/titan-chatbot-client:2.1.4
@servicetitan/titan-chatbot-client:2.1.5
@servicetitan/titan-chatbot-client:2.1.6
@servicetitan/titan-chatbot-client:2.1.7
@servicetitan/titan-chatbot-client:2.1.8
@servicetitan/titan-chatbot-ui-anvil2:9.0.1
@servicetitan/titan-chatbot-ui-anvil2:9.0.2
@servicetitan/titan-chatbot-ui-anvil2:9.0.3
@servicetitan/titan-chatbot-ui-anvil2:9.0.4
@servicetitan/titan-chatbot-ui-anvil2:9.0.5
@servicetitan/titan-chatbot-ui-anvil2:9.0.6
@servicetitan/titan-chatbot-ui-cypress:9.0.1
@servicetitan/titan-chatbot-ui-cypress:9.0.2
@servicetitan/titan-chatbot-ui-cypress:9.0.3
@servicetitan/titan-chatbot-ui-cypress:9.0.4
@servicetitan/titan-chatbot-ui-cypress:9.0.5
@servicetitan/titan-chatbot-ui-cypress:9.0.6
@servicetitan/titan-chatbot-ui:7.1.3
@servicetitan/titan-chatbot-ui:7.1.4
@servicetitan/titan-chatbot-ui:7.1.5
@servicetitan/titan-chatbot-ui:7.1.6
@servicetitan/titan-chatbot-ui:7.1.7
@servicetitan/titan-chatbot-ui:7.1.8
@servicetitan/tokens:12.9.1
@servicetitan/tokens:12.9.2
@servicetitan/tokens:12.9.3
@servicetitan/tokens:12.9.4
@servicetitan/tokens:12.9.5
@servicetitan/tokens:12.9.6
@servicetitan/toolbelt-shared-registry:1.14.1
@servicetitan/toolbelt-shared-registry:1.14.2
@servicetitan/toolbelt-shared-registry:1.14.3
@servicetitan/toolbelt-shared-registry:1.14.4
@servicetitan/toolbelt-shared-registry:1.14.5
@servicetitan/toolbelt-shared-registry:1.14.6
@servicetitan/uikit-docs:22.11.1
@servicetitan/uikit-docs:22.11.2
@servicetitan/uikit-docs:22.11.3
@servicetitan/uikit-docs:22.11.4
@servicetitan/uikit-docs:22.11.5
@servicetitan/uikit-docs:22.11.6
@servicetitan/unit-tests:0.0.2
@servicetitan/unit-tests:0.0.3
@servicetitan/unit-tests:0.0.4
@servicetitan/unit-tests:0.0.5
@servicetitan/unit-tests:0.0.6
@servicetitan/unit-tests:0.0.7
@servicetitan/va-mfe-loader:1.1.1
@servicetitan/va-mfe-loader:1.1.2
@servicetitan/va-mfe-loader:1.1.3
@servicetitan/va-mfe-loader:1.1.4
@servicetitan/va-mfe-loader:1.1.5
@servicetitan/va-mfe-loader:1.1.6
@servicetitan/web-components:38.1.1
@servicetitan/web-components:38.1.2
@servicetitan/web-components:38.1.3
@servicetitan/web-components:38.1.4
@servicetitan/web-components:38.1.5
@servicetitan/web-components:38.1.6
@servicetitan/widget-platform-monolith:5.6.1
@servicetitan/widget-platform-monolith:5.6.2
@servicetitan/widget-platform-monolith:5.6.3
@servicetitan/widget-platform-monolith:5.6.4
@servicetitan/widget-platform-monolith:5.6.5
@servicetitan/widget-platform-monolith:5.6.6
@servicetitan/widget-platform:5.6.1
@servicetitan/widget-platform:5.6.2
@servicetitan/widget-platform:5.6.3
@servicetitan/widget-platform:5.6.4
@servicetitan/widget-platform:5.6.5
@servicetitan/widget-platform:5.6.6

# @ornikar — mostly shared build/lint configs (devDependency reach) (42 packages, 297 versions)
@ornikar/apollo-link-timeout:1.4.2
@ornikar/apollo-link-timeout:1.4.3
@ornikar/apollo-link-timeout:1.4.4
@ornikar/apollo-link-timeout:1.4.5
@ornikar/apollo-link-timeout:1.4.6
@ornikar/apollo-link-timeout:1.4.7
@ornikar/babel-preset-base:6.0.10
@ornikar/babel-preset-base:6.0.3
@ornikar/babel-preset-base:6.0.4
@ornikar/babel-preset-base:6.0.5
@ornikar/babel-preset-base:6.0.6
@ornikar/babel-preset-base:6.0.7
@ornikar/babel-preset-base:6.0.8
@ornikar/babel-preset-base:6.0.9
@ornikar/babel-preset-kitt-universal:8.0.3
@ornikar/babel-preset-kitt-universal:8.0.4
@ornikar/babel-preset-kitt-universal:8.0.5
@ornikar/babel-preset-kitt-universal:8.0.6
@ornikar/babel-preset-kitt-universal:8.0.7
@ornikar/babel-preset-kitt-universal:8.0.8
@ornikar/babel-preset-react:6.1.10
@ornikar/babel-preset-react:6.1.4
@ornikar/babel-preset-react:6.1.5
@ornikar/babel-preset-react:6.1.6
@ornikar/babel-preset-react:6.1.7
@ornikar/babel-preset-react:6.1.8
@ornikar/babel-preset-react:6.1.9
@ornikar/browserslist-config:8.0.3
@ornikar/browserslist-config:8.0.4
@ornikar/browserslist-config:8.0.5
@ornikar/browserslist-config:8.0.6
@ornikar/browserslist-config:8.0.7
@ornikar/browserslist-config:8.0.8
@ornikar/browserslist-config:8.0.9
@ornikar/commitlint-config:8.3.2
@ornikar/commitlint-config:8.3.3
@ornikar/commitlint-config:8.3.4
@ornikar/commitlint-config:8.3.5
@ornikar/commitlint-config:8.3.6
@ornikar/commitlint-config:8.3.7
@ornikar/commitlint-config:8.3.8
@ornikar/eslint-config-babel-use:13.2.1
@ornikar/eslint-config-babel-use:13.2.2
@ornikar/eslint-config-babel-use:13.2.3
@ornikar/eslint-config-babel-use:13.2.4
@ornikar/eslint-config-babel-use:13.2.5
@ornikar/eslint-config-babel-use:13.2.6
@ornikar/eslint-config-babel-use:13.2.7
@ornikar/eslint-config-babel-use:13.2.8
@ornikar/eslint-config-babel:24.0.1
@ornikar/eslint-config-babel:24.0.2
@ornikar/eslint-config-babel:24.0.3
@ornikar/eslint-config-babel:24.0.4
@ornikar/eslint-config-babel:24.0.5
@ornikar/eslint-config-babel:24.0.6
@ornikar/eslint-config-babel:24.0.7
@ornikar/eslint-config-babel:24.0.8
@ornikar/eslint-config-formatjs:24.0.1
@ornikar/eslint-config-formatjs:24.0.2
@ornikar/eslint-config-formatjs:24.0.3
@ornikar/eslint-config-formatjs:24.0.4
@ornikar/eslint-config-formatjs:24.0.5
@ornikar/eslint-config-formatjs:24.0.6
@ornikar/eslint-config-node:12.2.1
@ornikar/eslint-config-node:12.2.2
@ornikar/eslint-config-node:12.2.3
@ornikar/eslint-config-node:12.2.4
@ornikar/eslint-config-node:12.2.5
@ornikar/eslint-config-node:12.2.6
@ornikar/eslint-config-react:24.0.1
@ornikar/eslint-config-react:24.0.2
@ornikar/eslint-config-react:24.0.3
@ornikar/eslint-config-react:24.0.4
@ornikar/eslint-config-react:24.0.5
@ornikar/eslint-config-react:24.0.6
@ornikar/eslint-config-react:24.0.7
@ornikar/eslint-config-typescript-nestjs:24.0.1
@ornikar/eslint-config-typescript-nestjs:24.0.2
@ornikar/eslint-config-typescript-nestjs:24.0.3
@ornikar/eslint-config-typescript-nestjs:24.0.4
@ornikar/eslint-config-typescript-nestjs:24.0.5
@ornikar/eslint-config-typescript-nestjs:24.0.6
@ornikar/eslint-config-typescript-nestjs:24.0.7
@ornikar/eslint-config-typescript-react:24.0.1
@ornikar/eslint-config-typescript-react:24.0.2
@ornikar/eslint-config-typescript-react:24.0.3
@ornikar/eslint-config-typescript-react:24.0.4
@ornikar/eslint-config-typescript-react:24.0.5
@ornikar/eslint-config-typescript-react:24.0.6
@ornikar/eslint-config-typescript-react:24.0.7
@ornikar/eslint-config-typescript:24.0.1
@ornikar/eslint-config-typescript:24.0.2
@ornikar/eslint-config-typescript:24.0.3
@ornikar/eslint-config-typescript:24.0.4
@ornikar/eslint-config-typescript:24.0.5
@ornikar/eslint-config-typescript:24.0.6
@ornikar/eslint-config:24.0.1
@ornikar/eslint-config:24.0.2
@ornikar/eslint-config:24.0.3
@ornikar/eslint-config:24.0.4
@ornikar/eslint-config:24.0.5
@ornikar/eslint-config:24.0.6
@ornikar/eslint-config:24.0.7
@ornikar/eslint-config:24.0.8
@ornikar/eslint-plugin-neverthrow:1.3.1
@ornikar/eslint-plugin-neverthrow:1.3.2
@ornikar/eslint-plugin-neverthrow:1.3.3
@ornikar/eslint-plugin-neverthrow:1.3.4
@ornikar/eslint-plugin-neverthrow:1.3.5
@ornikar/eslint-plugin-neverthrow:1.3.6
@ornikar/eslint-plugin-neverthrow:1.3.7
@ornikar/eslint-plugin-neverthrow:1.3.8
@ornikar/eslint-plugin-ornikar:24.0.1
@ornikar/eslint-plugin-ornikar:24.0.2
@ornikar/eslint-plugin-ornikar:24.0.3
@ornikar/eslint-plugin-ornikar:24.0.4
@ornikar/eslint-plugin-ornikar:24.0.5
@ornikar/eslint-plugin-ornikar:24.0.6
@ornikar/eslint-plugin-ornikar:24.0.7
@ornikar/graphql-config:1.1.1
@ornikar/graphql-config:1.1.2
@ornikar/graphql-config:1.1.3
@ornikar/graphql-config:1.1.4
@ornikar/graphql-config:1.1.5
@ornikar/graphql-config:1.1.6
@ornikar/graphql-config:1.1.7
@ornikar/intl-config:10.0.2
@ornikar/intl-config:10.0.3
@ornikar/intl-config:10.0.4
@ornikar/intl-config:10.0.5
@ornikar/intl-config:10.0.6
@ornikar/intl-config:10.0.7
@ornikar/intl-config:10.0.8
@ornikar/jest-config-react-native-web:12.0.3
@ornikar/jest-config-react-native-web:12.0.4
@ornikar/jest-config-react-native-web:12.0.5
@ornikar/jest-config-react-native-web:12.0.6
@ornikar/jest-config-react-native-web:12.0.7
@ornikar/jest-config-react-native-web:12.0.8
@ornikar/jest-config-react-native-web:12.0.9
@ornikar/jest-config-react-native:17.0.2
@ornikar/jest-config-react-native:17.0.3
@ornikar/jest-config-react-native:17.0.4
@ornikar/jest-config-react-native:17.0.5
@ornikar/jest-config-react-native:17.0.6
@ornikar/jest-config-react-native:17.0.7
@ornikar/jest-config-react-native:17.0.8
@ornikar/jest-config-react:18.0.2
@ornikar/jest-config-react:18.0.3
@ornikar/jest-config-react:18.0.4
@ornikar/jest-config-react:18.0.5
@ornikar/jest-config-react:18.0.6
@ornikar/jest-config-react:18.0.7
@ornikar/jest-config-react:18.0.8
@ornikar/jest-config:13.0.3
@ornikar/jest-config:13.0.4
@ornikar/jest-config:13.0.5
@ornikar/jest-config:13.0.6
@ornikar/jest-config:13.0.7
@ornikar/jest-config:13.0.8
@ornikar/jest-config:13.0.9
@ornikar/kitt2:1.0.1
@ornikar/kitt2:1.0.2
@ornikar/kitt2:1.0.3
@ornikar/kitt2:1.0.4
@ornikar/kitt2:1.0.5
@ornikar/kitt2:1.0.6
@ornikar/kitt2:1.0.7
@ornikar/lerna-config:11.0.1
@ornikar/lerna-config:11.0.2
@ornikar/lerna-config:11.0.3
@ornikar/lerna-config:11.0.4
@ornikar/lerna-config:11.0.5
@ornikar/lerna-config:11.0.6
@ornikar/lerna-config:11.0.7
@ornikar/monorepo-config:14.3.2
@ornikar/monorepo-config:14.3.3
@ornikar/monorepo-config:14.3.4
@ornikar/monorepo-config:14.3.5
@ornikar/monorepo-config:14.3.6
@ornikar/monorepo-config:14.3.7
@ornikar/monorepo-config:14.3.8
@ornikar/monorepo-config:14.3.9
@ornikar/postcss-config:9.1.2
@ornikar/postcss-config:9.1.3
@ornikar/postcss-config:9.1.4
@ornikar/postcss-config:9.1.5
@ornikar/postcss-config:9.1.6
@ornikar/postcss-config:9.1.7
@ornikar/postcss-config:9.1.8
@ornikar/prettier-config:9.0.3
@ornikar/prettier-config:9.0.4
@ornikar/prettier-config:9.0.5
@ornikar/prettier-config:9.0.6
@ornikar/prettier-config:9.0.7
@ornikar/prettier-config:9.0.8
@ornikar/prettier-config:9.0.9
@ornikar/prismic-components:0.0.2
@ornikar/prismic-components:0.0.3
@ornikar/prismic-components:0.0.4
@ornikar/prismic-components:0.0.5
@ornikar/prismic-components:0.0.6
@ornikar/prismic-components:0.0.7
@ornikar/prismic-components:0.0.8
@ornikar/react-modern-calendar-datepicker:3.2.1
@ornikar/react-modern-calendar-datepicker:3.2.2
@ornikar/react-modern-calendar-datepicker:3.2.3
@ornikar/react-modern-calendar-datepicker:3.2.4
@ornikar/react-modern-calendar-datepicker:3.2.5
@ornikar/react-modern-calendar-datepicker:3.2.6
@ornikar/react-modern-calendar-datepicker:3.2.7
@ornikar/react-native-svg-transformer:1.0.10
@ornikar/react-native-svg-transformer:1.0.11
@ornikar/react-native-svg-transformer:1.0.6
@ornikar/react-native-svg-transformer:1.0.7
@ornikar/react-native-svg-transformer:1.0.8
@ornikar/react-native-svg-transformer:1.0.9
@ornikar/renovate-config:9.0.2
@ornikar/renovate-config:9.0.3
@ornikar/renovate-config:9.0.4
@ornikar/renovate-config:9.0.5
@ornikar/renovate-config:9.0.6
@ornikar/renovate-config:9.0.7
@ornikar/renovate-config:9.0.8
@ornikar/renovate-config:9.0.9
@ornikar/repo-config-react-legacy-css:15.1.2
@ornikar/repo-config-react-legacy-css:15.1.3
@ornikar/repo-config-react-legacy-css:15.1.4
@ornikar/repo-config-react-legacy-css:15.1.5
@ornikar/repo-config-react-legacy-css:15.1.6
@ornikar/repo-config-react-legacy-css:15.1.7
@ornikar/repo-config-react-legacy-css:15.1.8
@ornikar/repo-config-react-legacy-css:15.1.9
@ornikar/repo-config-react:13.0.10
@ornikar/repo-config-react:13.0.11
@ornikar/repo-config-react:13.0.12
@ornikar/repo-config-react:13.0.13
@ornikar/repo-config-react:13.0.14
@ornikar/repo-config-react:13.0.15
@ornikar/repo-config-react:13.0.8
@ornikar/repo-config-react:13.0.9
@ornikar/repo-config:15.3.3
@ornikar/repo-config:15.3.4
@ornikar/repo-config:15.3.5
@ornikar/repo-config:15.3.6
@ornikar/repo-config:15.3.7
@ornikar/repo-config:15.3.8
@ornikar/repo-config:15.3.9
@ornikar/rollup-config:11.1.2
@ornikar/rollup-config:11.1.3
@ornikar/rollup-config:11.1.4
@ornikar/rollup-config:11.1.5
@ornikar/rollup-config:11.1.6
@ornikar/rollup-config:11.1.7
@ornikar/rollup-config:11.1.8
@ornikar/rollup-config:11.1.9
@ornikar/rollup-plugin-postcss:2.0.10
@ornikar/rollup-plugin-postcss:2.0.11
@ornikar/rollup-plugin-postcss:2.0.5
@ornikar/rollup-plugin-postcss:2.0.6
@ornikar/rollup-plugin-postcss:2.0.7
@ornikar/rollup-plugin-postcss:2.0.8
@ornikar/rollup-plugin-postcss:2.0.9
@ornikar/slate-react-fork:1.0.1
@ornikar/slate-react-fork:1.0.2
@ornikar/slate-react-fork:1.0.3
@ornikar/slate-react-fork:1.0.4
@ornikar/slate-react-fork:1.0.5
@ornikar/slate-react-fork:1.0.6
@ornikar/slate-react-fork:1.0.7
@ornikar/storybook-config:12.1.2
@ornikar/storybook-config:12.1.3
@ornikar/storybook-config:12.1.4
@ornikar/storybook-config:12.1.5
@ornikar/storybook-config:12.1.6
@ornikar/storybook-config:12.1.7
@ornikar/stylelint-config:14.0.3
@ornikar/stylelint-config:14.0.4
@ornikar/stylelint-config:14.0.5
@ornikar/stylelint-config:14.0.6
@ornikar/stylelint-config:14.0.7
@ornikar/stylelint-config:14.0.8
@ornikar/stylelint-config:14.0.9
@ornikar/typed-css-modules-loader:0.8.2
@ornikar/typed-css-modules-loader:0.8.3
@ornikar/typed-css-modules-loader:0.8.4
@ornikar/typed-css-modules-loader:0.8.5
@ornikar/typed-css-modules-loader:0.8.6
@ornikar/typed-css-modules-loader:0.8.7
@ornikar/typed-css-modules-loader:0.8.8
@ornikar/webpack-config:12.0.2
@ornikar/webpack-config:12.0.3
@ornikar/webpack-config:12.0.4
@ornikar/webpack-config:12.0.5
@ornikar/webpack-config:12.0.6
@ornikar/webpack-config:12.0.7
@ornikar/webpack-config:12.0.8

# @onereach (78 packages, 208 versions)
@onereach/authorizer-helper:0.0.11
@onereach/authorizer-helper:0.0.12
@onereach/authorizer-helper:0.0.13
@onereach/bandwidth-steps-voice-bxml:0.1.1
@onereach/bandwidth-steps-voice-bxml:0.1.2
@onereach/bandwidth-steps-voice-bxml:0.1.3
@onereach/billing-dto:27.2.1
@onereach/billing-dto:27.2.2
@onereach/billing-dto:27.2.3
@onereach/billing-shared:27.2.1
@onereach/billing-shared:27.2.2
@onereach/billing-shared:27.2.3
@onereach/cb-schema-translator:1.3.1
@onereach/cb-schema-translator:1.3.2
@onereach/cb-schema-translator:1.3.3
@onereach/channel-transformer:0.0.66
@onereach/channel-transformer:0.0.67
@onereach/channel-transformer:0.0.68
@onereach/channel-transformers:0.0.5
@onereach/channel-transformers:0.0.6
@onereach/channel-transformers:0.0.7
@onereach/ckeditor5-build-classic:30.0.1
@onereach/ckeditor5-build-classic:30.0.2
@onereach/condition-builder:1.0.8
@onereach/condition-builder:1.0.9
@onereach/content-builder-template-compiler:0.0.3
@onereach/content-builder-template-compiler:0.0.4
@onereach/content-builder-template-compiler:0.0.5
@onereach/content-builder:0.0.18
@onereach/content-builder:0.0.19
@onereach/content-builder:0.0.20
@onereach/expression-components:9.1.1
@onereach/expression-components:9.1.2
@onereach/expression-components:9.1.3
@onereach/font-icons:27.0.2
@onereach/font-icons:27.0.3
@onereach/font-icons:27.0.4
@onereach/get-version-data:3.1.2
@onereach/get-version-data:3.1.3
@onereach/get-version-data:3.1.4
@onereach/idw-apps:0.1.3
@onereach/idw-apps:0.1.4
@onereach/idw-apps:0.1.5
@onereach/idw-contracts:0.1.2
@onereach/idw-contracts:0.1.3
@onereach/idw-contracts:0.1.4
@onereach/idw-init-account-resources:1.0.1
@onereach/idw-init-account-resources:1.0.2
@onereach/idw-sdk:0.1.2
@onereach/idw-sdk:0.1.3
@onereach/idw-ui-components:0.1.2
@onereach/idw-ui-components:0.1.3
@onereach/idw-ui-components:0.1.4
@onereach/lambda-invocation:1.2.1
@onereach/lambda-invocation:1.2.2
@onereach/messengers-infobip-sdk:0.1.1
@onereach/messengers-infobip-sdk:0.1.2
@onereach/messengers-infobip-sdk:0.1.3
@onereach/or-browser-next:0.0.11
@onereach/or-browser-next:0.0.12
@onereach/or-browser:0.0.48
@onereach/or-browser:0.0.49
@onereach/or-browser:0.0.50
@onereach/or-content-builder-renderer:0.0.2
@onereach/or-content-builder-renderer:0.0.3
@onereach/or-content-builder-renderer:0.0.4
@onereach/or-file-uploader-next:0.0.10
@onereach/or-file-uploader-next:0.0.8
@onereach/or-file-uploader-next:0.0.9
@onereach/or-pro:1.13.1
@onereach/or-pro:1.13.2
@onereach/or-sdk-agent-cli:0.0.6
@onereach/or-sdk-agent-cli:0.0.7
@onereach/orest-cli:2.4.1
@onereach/orest-cli:2.4.2
@onereach/orest-cli:2.4.3
@onereach/orest-input-cli:1.18.1
@onereach/orest-input-cli:1.18.2
@onereach/orest-input-cli:1.18.3
@onereach/orest-jest-presets:0.0.3
@onereach/orest-jest-presets:0.0.4
@onereach/orest-jest-presets:0.0.5
@onereach/orest-vue-demi-vue2:0.0.4
@onereach/orest-vue-demi-vue2:0.0.5
@onereach/orest-vue-demi-vue2:0.0.6
@onereach/orest-vue-demi-vue3:0.0.4
@onereach/orest-vue-demi-vue3:0.0.5
@onereach/orest-vue-demi-vue3:0.0.6
@onereach/orest-vue3:0.0.4
@onereach/orest-vue3:0.0.5
@onereach/orest-vue3:0.0.6
@onereach/phonenumber-interpreter:0.0.18
@onereach/phonenumber-interpreter:0.0.19
@onereach/phonenumber-interpreter:0.0.20
@onereach/pnpm-audit-junit:1.0.3
@onereach/pnpm-audit-junit:1.0.4
@onereach/pnpm-audit-junit:1.0.5
@onereach/postcss-scoped-selector:1.2.1
@onereach/postcss-scoped-selector:1.2.2
@onereach/postcss-scoped-selector:1.2.3
@onereach/regex-helper:0.5.16
@onereach/regex-helper:0.5.17
@onereach/regex-helper:0.5.18
@onereach/regular-expressions-test:0.0.4
@onereach/regular-expressions-test:0.0.5
@onereach/regular-expressions:0.5.23
@onereach/regular-expressions:0.5.24
@onereach/rwc-client:6.4.7
@onereach/rwc-client:6.4.8
@onereach/rwc-client:6.4.9
@onereach/salesforce-miaw-client:0.0.3
@onereach/salesforce-miaw-client:0.0.4
@onereach/salesforce-miaw-client:0.0.5
@onereach/si-a-button:0.0.3
@onereach/si-a-button:0.0.4
@onereach/si-a-button:0.0.5
@onereach/si-alert:0.4.11
@onereach/si-alert:0.4.12
@onereach/si-alert:0.4.13
@onereach/si-checkbox-group:0.3.5
@onereach/si-checkbox-group:0.3.6
@onereach/si-checkbox:0.6.5
@onereach/si-checkbox:0.6.6
@onereach/si-code:0.6.4
@onereach/si-code:0.6.5
@onereach/si-collapsible-group:0.6.4
@onereach/si-collapsible-group:0.6.5
@onereach/si-collapsible-group:0.6.6
@onereach/si-copyable-text:0.4.11
@onereach/si-copyable-text:0.4.12
@onereach/si-copyable-text:0.4.13
@onereach/si-datepicker:0.4.5
@onereach/si-datepicker:0.4.6
@onereach/si-divider:0.4.11
@onereach/si-divider:0.4.12
@onereach/si-divider:0.4.13
@onereach/si-dropdown-advanced:0.4.5
@onereach/si-dropdown-advanced:0.4.6
@onereach/si-dropdown-simple:0.4.5
@onereach/si-dropdown-simple:0.4.6
@onereach/si-header:0.4.11
@onereach/si-header:0.4.12
@onereach/si-header:0.4.13
@onereach/si-header:0.4.14
@onereach/si-list:0.7.4
@onereach/si-list:0.7.5
@onereach/si-list:0.7.6
@onereach/si-merge-tag-input:0.4.5
@onereach/si-merge-tag-input:0.4.6
@onereach/si-merge-tag-input:0.4.7
@onereach/si-radio-group:0.3.5
@onereach/si-radio-group:0.3.6
@onereach/si-root:0.9.4
@onereach/si-root:0.9.5
@onereach/si-select:0.1.3
@onereach/si-select:0.1.4
@onereach/si-select:0.1.5
@onereach/si-step-chooser:0.4.4
@onereach/si-step-chooser:0.4.5
@onereach/si-switch:0.4.5
@onereach/si-switch:0.4.6
@onereach/si-switch:0.4.7
@onereach/si-text-message:0.4.5
@onereach/si-text-message:0.4.6
@onereach/si-text-message:0.4.7
@onereach/si-textinput:0.5.5
@onereach/si-textinput:0.5.6
@onereach/si-textinput:0.5.7
@onereach/si-validated-timestring-input:0.3.5
@onereach/si-validated-timestring-input:0.3.6
@onereach/slack-helpers:1.0.3
@onereach/slack-helpers:1.0.4
@onereach/slack-helpers:1.0.5
@onereach/ssml-editor:2.0.12
@onereach/ssml-editor:2.0.13
@onereach/step-components:0.1.37
@onereach/step-components:0.1.38
@onereach/step-conversation:1.0.41
@onereach/step-conversation:1.0.42
@onereach/step-conversation:1.0.43
@onereach/step-run-snowflake-query:0.1.1
@onereach/step-run-snowflake-query:0.1.2
@onereach/step-run-snowflake-query:0.1.3
@onereach/step-voice:7.0.32
@onereach/step-voice:7.0.33
@onereach/styles:27.0.2
@onereach/styles:27.0.3
@onereach/time-interpreter:1.0.30
@onereach/time-interpreter:1.0.31
@onereach/time-interpreter:1.0.32
@onereach/ts-memoize:1.0.2
@onereach/ts-memoize:1.0.3
@onereach/ts-memoize:1.0.4
@onereach/types-contacts-api:9.0.10
@onereach/types-contacts-api:9.0.8
@onereach/types-contacts-api:9.0.9
@onereach/ui-components-common:27.0.2
@onereach/ui-components-common:27.0.3
@onereach/ui-components-common:27.0.4
@onereach/ui-components-vue2:27.0.2
@onereach/ui-components-vue2:27.0.3
@onereach/ui-components-vue2:27.0.4
@onereach/ui-components:27.0.2
@onereach/ui-components:27.0.3
@onereach/v-event-calendar:0.1.22
@onereach/v-event-calendar:0.1.23
@onereach/webform:0.3.13
@onereach/webform:0.3.14

# @or-sdk — includes @or-sdk/auth (compounded downstream exposure) (74 packages, 155 versions)
@or-sdk/account-settings:1.3.6
@or-sdk/account-settings:1.3.7
@or-sdk/accounts:2.3.5
@or-sdk/accounts:2.3.6
@or-sdk/adapters:0.3.6
@or-sdk/adapters:0.3.7
@or-sdk/agents:4.21.3
@or-sdk/agents:4.21.4
@or-sdk/api-tokens-lambda:1.4.2
@or-sdk/api-tokens-lambda:1.4.3
@or-sdk/api-tokens:1.4.2
@or-sdk/api-tokens:1.4.3
@or-sdk/api-tokens:1.4.4
@or-sdk/apps:1.2.6
@or-sdk/apps:1.2.7
@or-sdk/apps:1.2.8
@or-sdk/auth:0.38.1
@or-sdk/auth:0.38.2
@or-sdk/authorizer:0.26.7
@or-sdk/authorizer:0.26.8
@or-sdk/base:0.44.4
@or-sdk/base:0.44.5
@or-sdk/billing-internal:27.2.1
@or-sdk/billing-internal:27.2.2
@or-sdk/billing:27.2.1
@or-sdk/billing:27.2.2
@or-sdk/bot-templates:2.2.5
@or-sdk/bot-templates:2.2.6
@or-sdk/bots:1.7.1
@or-sdk/bots:1.7.2
@or-sdk/card-templates:2.2.5
@or-sdk/card-templates:2.2.6
@or-sdk/cards:1.2.5
@or-sdk/cards:1.2.6
@or-sdk/ccp:10.15.4
@or-sdk/ccp:10.15.5
@or-sdk/chat:0.3.1
@or-sdk/chat:0.3.2
@or-sdk/contacts:4.7.5
@or-sdk/contacts:4.7.6
@or-sdk/content-request:0.2.6
@or-sdk/content-request:0.2.7
@or-sdk/data-hub-svc:2.3.5
@or-sdk/data-hub-svc:2.3.6
@or-sdk/data-hub:0.26.5
@or-sdk/data-hub:0.26.6
@or-sdk/deployer:1.7.5
@or-sdk/deployer:1.7.6
@or-sdk/deployments:2.1.5
@or-sdk/deployments:2.1.6
@or-sdk/discovery:1.12.1
@or-sdk/discovery:1.12.2
@or-sdk/druid:1.4.7
@or-sdk/druid:1.4.8
@or-sdk/event-manager:1.1.5
@or-sdk/event-manager:1.1.6
@or-sdk/files-sync-node:0.1.8
@or-sdk/files-sync-node:0.1.9
@or-sdk/files:3.11.6
@or-sdk/files:3.11.7
@or-sdk/flow-templates:2.1.5
@or-sdk/flow-templates:2.1.6
@or-sdk/flows:2.7.8
@or-sdk/flows:2.7.9
@or-sdk/graph:1.10.5
@or-sdk/graph:1.10.6
@or-sdk/hitl:0.41.1
@or-sdk/hitl:0.41.2
@or-sdk/identifiers:0.27.6
@or-sdk/identifiers:0.27.7
@or-sdk/idw-public:1.6.6
@or-sdk/idw-public:1.6.7
@or-sdk/idw-skill:1.4.1
@or-sdk/idw-skill:1.4.2
@or-sdk/idw:9.0.4
@or-sdk/idw:9.0.5
@or-sdk/invitations:1.4.8
@or-sdk/invitations:1.4.9
@or-sdk/key-value-storage:0.28.6
@or-sdk/key-value-storage:0.28.7
@or-sdk/keys:1.2.6
@or-sdk/keys:1.2.7
@or-sdk/knowledge-models:0.25.5
@or-sdk/knowledge-models:0.25.6
@or-sdk/library-categories:0.2.6
@or-sdk/library-categories:0.2.7
@or-sdk/library-categories:0.2.8
@or-sdk/library-source:0.4.5
@or-sdk/library-source:0.4.6
@or-sdk/library-source:0.4.7
@or-sdk/library-types-v1:9.0.1
@or-sdk/library-types-v1:9.0.2
@or-sdk/library-types-v2:9.0.1
@or-sdk/library-types-v2:9.0.2
@or-sdk/library:0.5.6
@or-sdk/library:0.5.7
@or-sdk/lookup:1.25.1
@or-sdk/lookup:1.25.2
@or-sdk/markdowner:0.5.1
@or-sdk/markdowner:0.5.2
@or-sdk/mcp-tools:0.5.2
@or-sdk/mcp-tools:0.5.3
@or-sdk/notifications:1.7.5
@or-sdk/notifications:1.7.6
@or-sdk/password:1.3.6
@or-sdk/password:1.3.7
@or-sdk/password:1.3.8
@or-sdk/payments:3.2.5
@or-sdk/payments:3.2.6
@or-sdk/permissions-cli:1.4.1
@or-sdk/permissions-cli:1.4.2
@or-sdk/permissions-lambda:2.5.1
@or-sdk/permissions-lambda:2.5.2
@or-sdk/permissions:2.8.1
@or-sdk/permissions:2.8.2
@or-sdk/permissions:2.8.3
@or-sdk/pgsql:1.5.1
@or-sdk/pgsql:1.5.2
@or-sdk/providers:0.3.6
@or-sdk/providers:0.3.7
@or-sdk/qna:3.4.2
@or-sdk/qna:3.4.3
@or-sdk/queue-manager:1.4.6
@or-sdk/queue-manager:1.4.7
@or-sdk/sdk-api:0.29.2
@or-sdk/sdk-api:0.29.3
@or-sdk/settings:0.25.6
@or-sdk/settings:0.25.7
@or-sdk/sku-builder:2.5.1
@or-sdk/sku-builder:2.5.2
@or-sdk/source-api:1.1.1
@or-sdk/source-api:1.1.2
@or-sdk/source:2.1.5
@or-sdk/source:2.1.6
@or-sdk/source:2.1.7
@or-sdk/step-templates:2.2.5
@or-sdk/step-templates:2.2.6
@or-sdk/store:2.1.5
@or-sdk/store:2.1.6
@or-sdk/tables:0.28.5
@or-sdk/tables:0.28.6
@or-sdk/tags:1.1.5
@or-sdk/tags:1.1.6
@or-sdk/tickets:1.9.5
@or-sdk/tickets:1.9.6
@or-sdk/transcripts:1.2.5
@or-sdk/transcripts:1.2.6
@or-sdk/users:3.8.1
@or-sdk/users:3.8.2
@or-sdk/view-templates:2.2.5
@or-sdk/view-templates:2.2.6
@or-sdk/views:3.1.5
@or-sdk/views:3.1.6
@or-sdk/web-search:0.6.1
@or-sdk/web-search:0.6.2

# @qlik (28 packages, 28 versions)
@qlik/api:2.14.2
@qlik/browserslist-config:3.0.2
@qlik/carbon-core:2.1.1
@qlik/carboncopy:1.1.6
@qlik/design-tokens:1.3.13
@qlik/dts-bundler:2.0.3
@qlik/embed-react:2.5.3
@qlik/embed-runtime:1.6.4
@qlik/embed-svelte:1.1.4
@qlik/embed-web-components:1.7.3
@qlik/eslint-config-base:0.1.1
@qlik/eslint-config-react:0.1.1
@qlik/eslint-config-svelte:0.1.1
@qlik/eslint-config-vue:0.1.1
@qlik/eslint-config:2.0.20
@qlik/nebula-table-utils:2.6.9
@qlik/oxfmt-config:0.1.6
@qlik/oxlint-config:0.7.2
@qlik/prettier-config:1.0.3
@qlik/react-native-simple-grid:1.5.5
@qlik/runtime-module-loader:1.5.1
@qlik/sdk:0.28.1
@qlik/sprout-design-docs:1.0.2
@qlik/sprout-gesture:0.0.13
@qlik/sprout-icons:0.12.3
@qlik/sprout-react-table:0.16.7
@qlik/sprout-react:6.45.3
@qlik/tsconfig:1.0.3

# @nebula.js (Qlik) (21 packages, 21 versions)
@nebula.js/cli-build:7.1.2
@nebula.js/cli-sense:7.1.2
@nebula.js/cli:7.1.2
@nebula.js/locale:0.6.2
@nebula.js/nucleus:0.5.1
@nebula.js/sn-action-button:2.3.1
@nebula.js/sn-animator:2.13.1
@nebula.js/sn-distributionplot:1.0.7
@nebula.js/sn-layout-container:4.4.1
@nebula.js/sn-line-chart:2.7.1
@nebula.js/sn-listbox:0.19.3
@nebula.js/sn-map:0.12.7
@nebula.js/sn-nav-menu:0.14.2
@nebula.js/sn-org-chart:1.7.1
@nebula.js/sn-shape:1.5.1
@nebula.js/sn-slider:0.20.1
@nebula.js/sn-tabbed-container:2.4.1
@nebula.js/snapshooter:0.6.1
@nebula.js/stardust:7.1.2
@nebula.js/test-utils:0.6.1
@nebula.js/theme:0.6.1

# @hubsync (1 packages, 27 versions)
@hubsync/web-sdk-react:6.3.10
@hubsync/web-sdk-react:6.3.11
@hubsync/web-sdk-react:6.3.12
@hubsync/web-sdk-react:6.3.13
@hubsync/web-sdk-react:6.3.14
@hubsync/web-sdk-react:6.3.15
@hubsync/web-sdk-react:6.3.16
@hubsync/web-sdk-react:6.3.17
@hubsync/web-sdk-react:6.3.18
@hubsync/web-sdk-react:6.3.19
@hubsync/web-sdk-react:6.3.20
@hubsync/web-sdk-react:6.3.21
@hubsync/web-sdk-react:6.3.22
@hubsync/web-sdk-react:6.3.23
@hubsync/web-sdk-react:6.3.24
@hubsync/web-sdk-react:6.3.25
@hubsync/web-sdk-react:6.3.26
@hubsync/web-sdk-react:6.3.27
@hubsync/web-sdk-react:6.3.28
@hubsync/web-sdk-react:6.3.29
@hubsync/web-sdk-react:6.3.30
@hubsync/web-sdk-react:6.3.31
@hubsync/web-sdk-react:6.3.32
@hubsync/web-sdk-react:6.3.33
@hubsync/web-sdk-react:6.3.7
@hubsync/web-sdk-react:6.3.8
@hubsync/web-sdk-react:6.3.9

# @arv-bedrock — includes auth / auth-sso (5 packages, 10 versions)
@arv-bedrock/auth-admin:1.0.2
@arv-bedrock/auth-admin:1.0.3
@arv-bedrock/auth-sso-backend:1.7.1
@arv-bedrock/auth-sso-backend:1.7.2
@arv-bedrock/auth-sso:1.6.1
@arv-bedrock/auth-sso:1.6.2
@arv-bedrock/auth:1.1.7
@arv-bedrock/auth:1.1.8
@arv-bedrock/logger:1.7.1
@arv-bedrock/logger:1.7.2

# @picsart (2 packages, 2 versions)
@picsart/ai-sdk:3.32.2
@picsart/gen-ai:2.55.11

# @deliveroo (2 packages, 2 versions)
@deliveroo/determinator:0.2.1
@deliveroo/reevent:1.0.1

# @adminide-stack (2 packages, 2 versions)
@adminide-stack/clock-tik-browser:12.0.24
@adminide-stack/yantra-mobile:12.0.33

# @workbench-stack (1 packages, 1 versions)
@workbench-stack/core:3.9.8

# @thiennq (1 packages, 1 versions)
@thiennq/docs-viewer:1.6.2

# ------------------------------------------------------------------------
# RE-SYNC 2026-08-05 against the Wiz IoC CSV as of upstream commit
# 2026-08-04 16:45 UTC ("update packages", #32). The entries above were
# taken from the 2026-08-04 12:55 UTC snapshot (#31); Wiz continued
# enumerating the wave after publication. This block adds 453 versions
# across 301 packages, of which 9 package names are newly listed — the
# @umacloud scope and umadev, an organization not represented in the
# earlier snapshot. The remaining 292 packages were already listed and
# gained further malicious versions. Upstream total is now 443 packages
# / 2,235 versions.
# ------------------------------------------------------------------------

# @onereach — additional versions (27 packages, 27 versions)
@onereach/ckeditor5-build-classic:30.0.3
@onereach/condition-builder:1.0.10
@onereach/idw-init-account-resources:1.0.3
@onereach/idw-sdk:0.1.4
@onereach/lambda-invocation:1.2.3
@onereach/or-browser-next:0.0.13
@onereach/or-pro:1.13.3
@onereach/or-sdk-agent-cli:0.0.8
@onereach/regular-expressions-test:0.0.6
@onereach/regular-expressions:0.5.25
@onereach/si-checkbox-group:0.3.7
@onereach/si-checkbox:0.6.7
@onereach/si-code:0.6.6
@onereach/si-datepicker:0.4.7
@onereach/si-dropdown-advanced:0.4.7
@onereach/si-dropdown-simple:0.4.7
@onereach/si-radio-group:0.3.7
@onereach/si-root:0.9.6
@onereach/si-step-chooser:0.4.6
@onereach/si-validated-timestring-input:0.3.7
@onereach/ssml-editor:2.0.14
@onereach/step-components:0.1.39
@onereach/step-voice:7.0.34
@onereach/styles:27.0.4
@onereach/ui-components:27.0.4
@onereach/v-event-calendar:0.1.24
@onereach/webform:0.3.15

# @or-sdk — additional versions (67 packages, 67 versions)
@or-sdk/account-settings:1.3.8
@or-sdk/accounts:2.3.7
@or-sdk/adapters:0.3.8
@or-sdk/agents:4.21.5
@or-sdk/api-tokens-lambda:1.4.4
@or-sdk/auth:0.38.3
@or-sdk/authorizer:0.26.9
@or-sdk/base:0.44.6
@or-sdk/billing-internal:27.2.3
@or-sdk/billing:27.2.3
@or-sdk/bot-templates:2.2.7
@or-sdk/bots:1.7.3
@or-sdk/card-templates:2.2.7
@or-sdk/cards:1.2.7
@or-sdk/ccp:10.15.6
@or-sdk/chat:0.3.3
@or-sdk/contacts:4.7.7
@or-sdk/content-request:0.2.8
@or-sdk/data-hub-svc:2.3.7
@or-sdk/data-hub:0.26.7
@or-sdk/deployer:1.7.7
@or-sdk/deployments:2.1.7
@or-sdk/discovery:1.12.3
@or-sdk/druid:1.4.9
@or-sdk/event-manager:1.1.7
@or-sdk/files-sync-node:0.1.10
@or-sdk/files:3.11.8
@or-sdk/flow-templates:2.1.7
@or-sdk/flows:2.7.10
@or-sdk/graph:1.10.7
@or-sdk/hitl:0.41.3
@or-sdk/identifiers:0.27.8
@or-sdk/idw-public:1.6.8
@or-sdk/idw-skill:1.4.3
@or-sdk/idw:9.0.6
@or-sdk/invitations:1.4.10
@or-sdk/key-value-storage:0.28.8
@or-sdk/keys:1.2.8
@or-sdk/knowledge-models:0.25.7
@or-sdk/library-types-v1:9.0.3
@or-sdk/library-types-v2:9.0.3
@or-sdk/library:0.5.8
@or-sdk/lookup:1.25.3
@or-sdk/markdowner:0.5.3
@or-sdk/mcp-tools:0.5.4
@or-sdk/notifications:1.7.7
@or-sdk/payments:3.2.7
@or-sdk/permissions-cli:1.4.3
@or-sdk/permissions-lambda:2.5.3
@or-sdk/pgsql:1.5.3
@or-sdk/providers:0.3.8
@or-sdk/qna:3.4.4
@or-sdk/queue-manager:1.4.8
@or-sdk/sdk-api:0.29.4
@or-sdk/settings:0.25.8
@or-sdk/sku-builder:2.5.3
@or-sdk/source-api:1.1.3
@or-sdk/step-templates:2.2.7
@or-sdk/store:2.1.7
@or-sdk/tables:0.28.7
@or-sdk/tags:1.1.7
@or-sdk/tickets:1.9.7
@or-sdk/transcripts:1.2.7
@or-sdk/users:3.8.3
@or-sdk/view-templates:2.2.7
@or-sdk/views:3.1.7
@or-sdk/web-search:0.6.3

# @ornikar — additional versions (42 packages, 158 versions)
@ornikar/apollo-link-timeout:1.4.10
@ornikar/apollo-link-timeout:1.4.11
@ornikar/apollo-link-timeout:1.4.8
@ornikar/apollo-link-timeout:1.4.9
@ornikar/babel-preset-base:6.0.11
@ornikar/babel-preset-base:6.0.12
@ornikar/babel-preset-base:6.0.13
@ornikar/babel-preset-base:6.0.14
@ornikar/babel-preset-kitt-universal:8.0.10
@ornikar/babel-preset-kitt-universal:8.0.11
@ornikar/babel-preset-kitt-universal:8.0.12
@ornikar/babel-preset-kitt-universal:8.0.9
@ornikar/babel-preset-react:6.1.11
@ornikar/babel-preset-react:6.1.12
@ornikar/babel-preset-react:6.1.13
@ornikar/babel-preset-react:6.1.14
@ornikar/browserslist-config:8.0.10
@ornikar/browserslist-config:8.0.11
@ornikar/commitlint-config:8.3.10
@ornikar/commitlint-config:8.3.11
@ornikar/commitlint-config:8.3.12
@ornikar/commitlint-config:8.3.9
@ornikar/eslint-config-babel-use:13.2.10
@ornikar/eslint-config-babel-use:13.2.11
@ornikar/eslint-config-babel-use:13.2.12
@ornikar/eslint-config-babel-use:13.2.9
@ornikar/eslint-config-babel:24.0.10
@ornikar/eslint-config-babel:24.0.11
@ornikar/eslint-config-babel:24.0.12
@ornikar/eslint-config-babel:24.0.9
@ornikar/eslint-config-formatjs:24.0.10
@ornikar/eslint-config-formatjs:24.0.7
@ornikar/eslint-config-formatjs:24.0.8
@ornikar/eslint-config-formatjs:24.0.9
@ornikar/eslint-config-node:12.2.10
@ornikar/eslint-config-node:12.2.7
@ornikar/eslint-config-node:12.2.8
@ornikar/eslint-config-node:12.2.9
@ornikar/eslint-config-react:24.0.10
@ornikar/eslint-config-react:24.0.11
@ornikar/eslint-config-react:24.0.8
@ornikar/eslint-config-react:24.0.9
@ornikar/eslint-config-typescript-nestjs:24.0.10
@ornikar/eslint-config-typescript-nestjs:24.0.11
@ornikar/eslint-config-typescript-nestjs:24.0.8
@ornikar/eslint-config-typescript-nestjs:24.0.9
@ornikar/eslint-config-typescript-react:24.0.10
@ornikar/eslint-config-typescript-react:24.0.11
@ornikar/eslint-config-typescript-react:24.0.8
@ornikar/eslint-config-typescript-react:24.0.9
@ornikar/eslint-config-typescript:24.0.10
@ornikar/eslint-config-typescript:24.0.7
@ornikar/eslint-config-typescript:24.0.8
@ornikar/eslint-config-typescript:24.0.9
@ornikar/eslint-config:24.0.10
@ornikar/eslint-config:24.0.11
@ornikar/eslint-config:24.0.12
@ornikar/eslint-config:24.0.9
@ornikar/eslint-plugin-neverthrow:1.3.10
@ornikar/eslint-plugin-neverthrow:1.3.11
@ornikar/eslint-plugin-neverthrow:1.3.12
@ornikar/eslint-plugin-neverthrow:1.3.9
@ornikar/eslint-plugin-ornikar:24.0.10
@ornikar/eslint-plugin-ornikar:24.0.11
@ornikar/eslint-plugin-ornikar:24.0.8
@ornikar/eslint-plugin-ornikar:24.0.9
@ornikar/graphql-config:1.1.10
@ornikar/graphql-config:1.1.11
@ornikar/graphql-config:1.1.8
@ornikar/graphql-config:1.1.9
@ornikar/intl-config:10.0.10
@ornikar/intl-config:10.0.9
@ornikar/jest-config-react-native-web:12.0.10
@ornikar/jest-config-react-native-web:12.0.11
@ornikar/jest-config-react-native-web:12.0.12
@ornikar/jest-config-react-native-web:12.0.13
@ornikar/jest-config-react-native:17.0.10
@ornikar/jest-config-react-native:17.0.11
@ornikar/jest-config-react-native:17.0.12
@ornikar/jest-config-react-native:17.0.9
@ornikar/jest-config-react:18.0.10
@ornikar/jest-config-react:18.0.11
@ornikar/jest-config-react:18.0.9
@ornikar/jest-config:13.0.10
@ornikar/jest-config:13.0.11
@ornikar/jest-config:13.0.12
@ornikar/jest-config:13.0.13
@ornikar/kitt2:1.0.10
@ornikar/kitt2:1.0.11
@ornikar/kitt2:1.0.8
@ornikar/kitt2:1.0.9
@ornikar/lerna-config:11.0.10
@ornikar/lerna-config:11.0.11
@ornikar/lerna-config:11.0.8
@ornikar/lerna-config:11.0.9
@ornikar/monorepo-config:14.3.10
@ornikar/monorepo-config:14.3.11
@ornikar/monorepo-config:14.3.12
@ornikar/monorepo-config:14.3.13
@ornikar/postcss-config:9.1.10
@ornikar/postcss-config:9.1.11
@ornikar/postcss-config:9.1.12
@ornikar/postcss-config:9.1.9
@ornikar/prettier-config:9.0.10
@ornikar/prettier-config:9.0.11
@ornikar/prismic-components:0.0.10
@ornikar/prismic-components:0.0.11
@ornikar/prismic-components:0.0.12
@ornikar/prismic-components:0.0.9
@ornikar/react-modern-calendar-datepicker:3.2.10
@ornikar/react-modern-calendar-datepicker:3.2.11
@ornikar/react-modern-calendar-datepicker:3.2.8
@ornikar/react-modern-calendar-datepicker:3.2.9
@ornikar/react-native-svg-transformer:1.0.12
@ornikar/react-native-svg-transformer:1.0.13
@ornikar/renovate-config:9.0.10
@ornikar/renovate-config:9.0.11
@ornikar/renovate-config:9.0.12
@ornikar/renovate-config:9.0.13
@ornikar/repo-config-react-legacy-css:15.1.10
@ornikar/repo-config-react-legacy-css:15.1.11
@ornikar/repo-config-react-legacy-css:15.1.12
@ornikar/repo-config-react-legacy-css:15.1.13
@ornikar/repo-config-react:13.0.16
@ornikar/repo-config-react:13.0.17
@ornikar/repo-config-react:13.0.18
@ornikar/repo-config-react:13.0.19
@ornikar/repo-config:15.3.10
@ornikar/repo-config:15.3.11
@ornikar/repo-config:15.3.12
@ornikar/repo-config:15.3.13
@ornikar/rollup-config:11.1.10
@ornikar/rollup-config:11.1.11
@ornikar/rollup-config:11.1.12
@ornikar/rollup-config:11.1.13
@ornikar/rollup-plugin-postcss:2.0.12
@ornikar/rollup-plugin-postcss:2.0.13
@ornikar/rollup-plugin-postcss:2.0.14
@ornikar/rollup-plugin-postcss:2.0.15
@ornikar/slate-react-fork:1.0.10
@ornikar/slate-react-fork:1.0.11
@ornikar/slate-react-fork:1.0.8
@ornikar/slate-react-fork:1.0.9
@ornikar/storybook-config:12.1.10
@ornikar/storybook-config:12.1.8
@ornikar/storybook-config:12.1.9
@ornikar/stylelint-config:14.0.10
@ornikar/stylelint-config:14.0.11
@ornikar/stylelint-config:14.0.12
@ornikar/stylelint-config:14.0.13
@ornikar/typed-css-modules-loader:0.8.10
@ornikar/typed-css-modules-loader:0.8.11
@ornikar/typed-css-modules-loader:0.8.12
@ornikar/typed-css-modules-loader:0.8.9
@ornikar/webpack-config:12.0.10
@ornikar/webpack-config:12.0.11
@ornikar/webpack-config:12.0.12
@ornikar/webpack-config:12.0.9

# @servicetitan — additional versions (141 packages, 141 versions)
@servicetitan/acquisition-functions:5.22.7
@servicetitan/admin-layout:2.4.9
@servicetitan/admin-sql-table:1.0.20
@servicetitan/ajax-handlers:38.1.7
@servicetitan/anvil-css-utilities:14.5.10
@servicetitan/anvil-fonts:14.5.10
@servicetitan/anvil-icon:0.5.7
@servicetitan/anvil-icons:14.5.10
@servicetitan/anvil-react:0.11.9
@servicetitan/anvil-themes:14.5.10
@servicetitan/anvil-token:0.4.7
@servicetitan/anvil2-codemods:0.11.8
@servicetitan/anvil2-ext-atlas:4.0.8
@servicetitan/anvil2-ext-charts:0.2.10
@servicetitan/anvil2-ext-common:0.7.7
@servicetitan/anvil2-ext-mwv:0.0.11
@servicetitan/anvil2-illustrations:1.0.8
@servicetitan/anvil2-mcp:0.0.15
@servicetitan/anvil2:3.9.7
@servicetitan/assist-ui:2.1.7
@servicetitan/assist-utils:1.1.8
@servicetitan/carto-charts-core:0.0.8
@servicetitan/carto-charts-react:0.0.8
@servicetitan/carto-charts-rn:0.0.8
@servicetitan/carto-react-kit:0.8.10
@servicetitan/carto-rn-kit:0.0.16
@servicetitan/carto-tokens:0.3.7
@servicetitan/component-usage:28.5.7
@servicetitan/confirm-navigation:41.3.7
@servicetitan/confirm:41.3.7
@servicetitan/contentful-proxy:1.1.18
@servicetitan/contentful:0.0.9
@servicetitan/cp-api:1.115.7
@servicetitan/cp-mfe-dev:1.115.7
@servicetitan/cp-mfe:1.115.7
@servicetitan/cp-react-hooks:1.115.7
@servicetitan/cp-ui:1.115.7
@servicetitan/culture:41.3.7
@servicetitan/data-query:41.3.7
@servicetitan/datadog-rum:38.1.7
@servicetitan/datetime-utils:41.3.7
@servicetitan/design-system:14.5.10
@servicetitan/docs-anvil-uikit-contrib:41.3.7
@servicetitan/docs-uikit:38.1.7
@servicetitan/document-title:2.4.7
@servicetitan/dte-pdf-editor:1.76.7
@servicetitan/dte-unlayer:0.150.7
@servicetitan/eh-module-communication:0.2.7
@servicetitan/error-boundary:38.1.7
@servicetitan/eslint-config:38.1.7
@servicetitan/eslint-plugin-decorators-declare:12.8.21
@servicetitan/eslint-plugin-folder-schema:38.1.7
@servicetitan/eslint-plugin-mobx-6:12.8.20
@servicetitan/eslint-plugin-processors-stub:12.8.21
@servicetitan/eslint-plugin:38.1.7
@servicetitan/examples:1.2.11
@servicetitan/feature-spotlight:3.9.7
@servicetitan/folder-lint:38.1.7
@servicetitan/forge:0.5.7
@servicetitan/form-state:41.3.7
@servicetitan/form:41.3.7
@servicetitan/grid:0.0.69
@servicetitan/hammer-icon:1.2.7
@servicetitan/hammer-react:1.42.8
@servicetitan/hammer-token:3.1.7
@servicetitan/hash-browser-router:38.1.7
@servicetitan/help-center:1.0.14
@servicetitan/html-sketchapp:4.2.14
@servicetitan/install:38.1.7
@servicetitan/intl:7.2.7
@servicetitan/json-render-react:0.4.12
@servicetitan/kendo-theme:0.0.33
@servicetitan/ko-bridge:38.1.7
@servicetitan/launchdarkly-service:38.1.7
@servicetitan/lazy-module:38.1.7
@servicetitan/ld-type-generator:0.2.7
@servicetitan/line-item-editor:1.5.7
@servicetitan/link-item:41.3.7
@servicetitan/log-service:38.1.7
@servicetitan/marketing-direct-mail-components:20.1.7
@servicetitan/marketing-email-components:20.2.9
@servicetitan/marketing-form:0.1.8
@servicetitan/marketing-global-route:1.14.7
@servicetitan/marketing-integration-widgets:1.0.46
@servicetitan/marketing-route:1.2.7
@servicetitan/marketing-ui:9.3.7
@servicetitan/marketing-widgets:1.0.7
@servicetitan/measure-sheet-data:2.6.7
@servicetitan/mfe-quick-actions:0.5.55
@servicetitan/micro-frontend:0.0.10
@servicetitan/microfront-auth:0.0.11
@servicetitan/microfront-tests:0.0.17
@servicetitan/microfront-utils:1.4.7
@servicetitan/microfront:0.0.8
@servicetitan/modularpayments-webfields:1.0.59
@servicetitan/moneyout-api-client:1.29.7
@servicetitan/mpa-components:2.5.7
@servicetitan/navigation:14.1.7
@servicetitan/notifications:41.3.7
@servicetitan/onboarding-ui:18.5.7
@servicetitan/quick-actions:1.15.8
@servicetitan/react-hooks:7.7.7
@servicetitan/react-ioc:38.1.7
@servicetitan/responsive:6.1.7
@servicetitan/restrict-imports:38.1.7
@servicetitan/schema-comparison:0.1.9
@servicetitan/skeleton:9.2.10
@servicetitan/standalone-core-feature-gates:1.11.10
@servicetitan/standalone-feature-flags:2.3.8
@servicetitan/standalone-root:1.11.9
@servicetitan/standalone-tm-api:1.1.7
@servicetitan/standalone-ui:2.2.10
@servicetitan/startup-jest:2.2.7
@servicetitan/startup-mfe-compat:0.5.7
@servicetitan/startup-utils:38.1.7
@servicetitan/startup:38.1.7
@servicetitan/stylelint-config:38.1.7
@servicetitan/suppress-warnings:38.1.7
@servicetitan/table:41.3.7
@servicetitan/tanstack-query-mobx:6.2.7
@servicetitan/temporal-lite:3.4.7
@servicetitan/testing-library:6.6.7
@servicetitan/thoughtspot-theme:1.7.7
@servicetitan/time-zones:3.8.7
@servicetitan/titan-chat-ui-anvil2:9.0.7
@servicetitan/titan-chat-ui-common:9.0.7
@servicetitan/titan-chat-ui-cypress:2.1.9
@servicetitan/titan-chat-ui:7.1.9
@servicetitan/titan-chatbot-api:9.0.7
@servicetitan/titan-chatbot-client:2.1.9
@servicetitan/titan-chatbot-ui-anvil2:9.0.7
@servicetitan/titan-chatbot-ui-cypress:9.0.7
@servicetitan/titan-chatbot-ui:7.1.9
@servicetitan/tokens:12.9.7
@servicetitan/toolbelt-shared-registry:1.14.7
@servicetitan/uikit-docs:22.11.7
@servicetitan/unit-tests:0.0.8
@servicetitan/va-mfe-loader:1.1.7
@servicetitan/web-components:38.1.7
@servicetitan/widget-platform-monolith:5.6.7
@servicetitan/widget-platform:5.6.7

# @thiennq — additional versions (1 packages, 2 versions)
@thiennq/docs-viewer:1.6.3
@thiennq/docs-viewer:1.6.4

# @umacloud — additional versions (8 packages, 8 versions)
@umacloud/cli-darwin-arm64:1.0.74
@umacloud/cli-darwin-x64:1.0.74
@umacloud/cli-linux-arm64:1.0.74
@umacloud/cli-linux-musl-arm64:1.0.74
@umacloud/cli-linux-musl-x64:1.0.74
@umacloud/cli-linux-x64:1.0.74
@umacloud/cli-win32-x64:1.0.74
@umacloud/knowledge:1.0.74

# unscoped — additional versions (15 packages, 50 versions)
babel-plugin-linaria-css-to-undefined:0.3.10
babel-plugin-linaria-css-to-undefined:0.3.11
babel-plugin-linaria-css-to-undefined:0.3.12
babel-plugin-linaria-css-to-undefined:0.3.13
babel-plugin-linaria-css-to-undefined:0.3.14
babel-plugin-linaria-css-to-undefined:0.3.15
babel-plugin-linaria-css-to-undefined:0.3.16
babel-plugin-linaria-css-to-undefined:0.3.17
conv-context-next:1.0.10
editable-contracts:0.0.27
eslint-plugin-folder-schema:1.0.21
example-js-project:1.0.10
example-js-project:1.0.11
folder-lint:1.0.21
frontend-orb:4.4.11
frontend-orb:4.4.12
frontend-orb:4.4.13
frontend-orb:4.4.14
frontend-orb:4.4.15
frontend-orb:4.4.16
frontend-orb:4.4.17
frontend-orb:4.4.18
native-frontend-orb:1.1.12
native-frontend-orb:1.1.13
native-frontend-orb:1.1.14
native-frontend-orb:1.1.15
native-frontend-orb:1.1.16
native-frontend-orb:1.1.17
native-frontend-orb:1.1.18
native-frontend-orb:1.1.19
pob-test-package-in-monorepo:5.2.10
pob-test-package-in-monorepo:5.2.11
pob-test-package-in-monorepo:5.2.12
pob-test-package-in-monorepo:5.2.13
pob-test-package-in-monorepo:5.2.14
pob-test-package-in-monorepo:5.2.15
pob-test-package-in-monorepo:5.2.16
pob-test-typescript-package-in-monorepo:4.2.11
pob-test-typescript-package-in-monorepo:4.2.12
pob-test-typescript-package-in-monorepo:4.2.13
pob-test-typescript-package-in-monorepo:4.2.14
pob-test-typescript-package-in-monorepo:4.2.15
pob-test-typescript-package-in-monorepo:4.2.16
pob-test-typescript-package-in-monorepo:4.2.17
rwc-client:0.29.18
rwc-client:0.29.19
tslint-folder-schema:1.0.21
umadev:1.0.74
verdaccio-okta-oauth:38.1.16
verdaccio-tarball-local-storage:38.1.16

# ------------------------------------------------------------------------
# ADDENDUM 2026-08-06 — one keyv-wave version the Wiz IoC CSV does not list.
# @nebula.js/cli-serve@7.1.2 was trojanized in the same 2026-08-04
# 10:46:37-10:46:39 UTC publish burst as the rest of the @nebula.js scope
# (cli-build .237, cli-sense .262, cli .284, cli-serve 10:46:39.018,
# stardust .344), but the package is absent from reports/keyv-packages.csv
# entirely, so neither the 2026-08-04 section nor the 2026-08-05 re-sync
# above picked it up. Confirmed by OSV MAL-2026-11568 /
# GHSA-p6mm-86xq-m5x4, whose affected set is exactly ["7.1.2"], and by the
# npm registry, which still records time["7.1.2"] =
# 2026-08-04T10:46:39.018Z while no longer serving the version
# (dist-tags.latest is back to 7.1.1). keyv-wave @nebula.js coverage is now
# 22 packages / 22 versions.
# ------------------------------------------------------------------------

# @nebula.js — additional version (1 package, 1 version)
@nebula.js/cli-serve:7.1.2

# ------------------------------------------------------------------------
# RE-SYNC 2026-08-10 — Go modules added to the Wiz IoC CSV on 2026-08-06.
# Upstream snapshot: 2026-08-06 14:16 UTC. The August 4 section and the
# 2026-08-05 re-sync above were npm-only because the CSV was npm-only at the
# time; Wiz has since extended it to Go modules caught in the same wave.
# The npm side is unchanged — a full re-diff against this snapshot found zero
# npm entries missing, so only the Go modules below are new.
#
# 3 modules, 82 versions. Versions keep the canonical leading "v"
# (go.mod / go.sum form), matching the existing go: entry above.
# ------------------------------------------------------------------------

# github.com/juxtaposition1/v.a.p.e (76 versions)
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805081246-648cd8543c4f
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805084238-a34d6435a226
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805085748-6b70acca383d
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805091749-3577fc492f9c
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805094244-a5ad050e5764
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805095815-e2821268cb56
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805102734-fa13efcb0021
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805103721-6c35385e306e
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805105744-2e3821fe0134
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805112245-3e6a394afda3
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805114232-76b7500ec99e
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805121229-0c330a3d16cd
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805122728-bfb00c75aa48
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805125426-65fa5b7ba144
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805125931-566d41742f4c
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805131702-56e7d684a7a6
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805135237-28a7c47d4017
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805135941-e95c44f99bb9
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805141432-e1b9b59e611a
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805143749-f2b2c421e37c
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805150258-2dd8de5f8b82
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805153012-03817d9dcb06
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805155541-6e200f48bed4
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805160440-cae1af004815
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805162144-8a5792ca59b4
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805164404-c27e2a0b2ed0
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805170738-4a03dad0af5b
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805172240-5402ee6af6d0
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805173922-b4e09c7b0ae7
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805175512-3d32000f14a1
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805182343-a1bcaf99c97c
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805183840-851084b92f8b
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805185339-f12d833172c1
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805190902-09f55a08f8a7
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805193709-50587cb98197
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805195833-428363c0e2c5
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805200518-ab6dc8c4446c
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805202517-5c862603d9f5
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805204037-ca48947f8a31
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805211042-0b0f2f67c57a
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805211124-e77887f58b93
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805213530-744cc0dd3ef3
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805215606-597f6f6481a0
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805222601-98582ceab7dd
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805224049-cc6ae51f5de1
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805231847-085f8dfc81e3
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260805234047-cbf5253ac558
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806000746-9b2e17a0848f
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806002542-b347e6b696b4
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806004040-e8e99338dbfc
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806005540-a0731ec7b451
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806011031-914d19a0a708
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806014057-af12bf53eb16
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806015918-32bd78818d72
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806023252-4db2eb1a7954
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806025838-528f91597058
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806031328-23fce7ca2be4
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806034831-0b830950925e
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806035836-837ee11a4674
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806041330-0a41580a4823
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806042832-d8137245c046
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806045914-059a503366ea
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806051440-a8eacd308e3e
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806055049-3b933ad0d43d
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806061600-1f9c1f1a8316
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806063112-12a180ea9dfb
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806070155-d8559dbbb0ba
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806072501-177df800e270
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806074653-eeb0c44624db
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806081758-f0978eaf84f0
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806083709-55eb26fa9f3e
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806090334-bbfbbfcf1262
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806091959-ae0b39dcc70f
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806093409-c5c5fcc4e0b1
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806094957-43d505694256
go:github.com/juxtaposition1/v.a.p.e:v0.0.0-20260806100501-bde6a26bd440

# github.com/adieuu-llc/adieuu-2026 (5 versions)
go:github.com/adieuu-llc/adieuu-2026:v0.0.0-20260805040439-27421527967b
go:github.com/adieuu-llc/adieuu-2026:v0.4.10
go:github.com/adieuu-llc/adieuu-2026:v0.4.11
go:github.com/adieuu-llc/adieuu-2026:v0.4.12
go:github.com/adieuu-llc/adieuu-2026:v0.4.9

# github.com/evilgodfahim/kal (1 versions)
go:github.com/evilgodfahim/kal:v0.0.0-20260805062327-23dc26d5459b

# ========================================================================
# SEPTEMBER - OCTOBER 2026 — three incidents after the keyv/cacheable wave.
# Every version below is confirmed by an OSV MAL- advisory as well as the
# vendor write-up cited for its block. Bad versions have since been unpublished,
# so this list is the only remaining record of them; neighbouring versions are
# clean and deliberately absent.
# ========================================================================

# ------------------------------------------------------------------------
# 2026-09-07 — Mini Shai-Hulud (May 19 @antv payload) resurfaces after 111 days.
# Aikido ("Shai-Hulud Rises From the Dead after 111 days"): four versions
# published within one hour (09:25 UTC) by a single npm account, all carrying
# the byte-identical May 19 payload (index.js SHA-256 e37e3ddeeaaa…, preinstall
# "bun run index.js"). npm has since replaced each with 0.0.1-security.
# OSV: MAL-2026-16024, MAL-2026-16025, MAL-2026-16026, MAL-2026-16032.
# 4 packages, 4 versions.
# ------------------------------------------------------------------------
blueai-cli:0.7.0
bmc-i18n-extract-cli:1.1.1
bmc-translate-utils:1.1.1
feishu-docx-mcp:0.3.2

# ------------------------------------------------------------------------
# 2026-09-23 — "supplychain.local" Go-binary worm (Aikido). This is a new
# family, not Shai-Hulud code: a multiplatform Go "sckit" binary that steals
# tokens and republishes through npm, PyPI and a GitHub Actions workflow it
# plants. It runs when the package is invoked, not at install time.
# npm: the attacker interleaved with the maintainer, so 0.1.22 and 0.1.24 are
# clean republishes (identical file count/size to 0.1.20); only the odd versions
# carried the binary. OSV MAL-2026-16476 lists exactly 0.1.21, 0.1.23, 0.1.25.
# PyPI: MemoryOS 2.0.34 (OSV MAL-2026-16475, PYSEC-2026-3987); since removed.
# 2 packages, 4 versions.
# ------------------------------------------------------------------------
@memtensor/memos-cloud-openclaw-plugin:0.1.21
@memtensor/memos-cloud-openclaw-plugin:0.1.23
@memtensor/memos-cloud-openclaw-plugin:0.1.25
pypi:memoryos:2.0.34

# ------------------------------------------------------------------------
# 2026-10-08 — tensorlake SDK, ChainDrop/keyv-family payload (Endor Labs,
# Socket, Aikido, OX Security). Published 01:12:07 UTC from the project's own
# GitHub Actions release workflow, with provenance, after an attacker commit to
# main. Delivery is "preinstall": "node lib/setup.mjs", which loads Bun and runs
# lib/Math_Symbol.js. It has its own C2-rotation contract (0xb614155F…) and
# domain (iseekaigogo[.]com), separate from the August wave. OSV MAL-2026-17650.
# NOT listed: the six tensorlake-native-*@0.5.144 platform packages from the
# same release run. Endor Labs found no payload and no install script in them;
# they are only native binaries.
# 1 package, 1 version.
# ------------------------------------------------------------------------
tensorlake:0.5.144

# ========================================================================
# JULY - OCTOBER 2026 — incidents found in the 2026-11-02 sweep: four new
# ones, plus older ones earlier sweeps missed. Versions come from OSV or the
# cited vendor tables, read directly. Bad versions have been removed from
# their registries; neighbouring versions are clean and deliberately absent.
# ========================================================================

# ------------------------------------------------------------------------
# 2026-07-23 — mrmustard 0.7.4, PyPI maintainer-token hijack (StepSecurity).
# Credential stealer that runs on import. No tag or release matches it.
# OSV MAL-2026-11049. 1 package, 1 version.
# ------------------------------------------------------------------------
pypi:mrmustard:0.7.4

# ------------------------------------------------------------------------
# 2026-08-20 — crates.io: arrayref, internment and append-only-vec were
# published from one compromised owner account with a dependency on
# proc-macro1, whose build script fetched a payload (JFrog; The Hacker News).
# First per-version crates entries: TrapDoor's crates are matched by name in
# code. OSV lists proc-macro1 and proc-macro-en as malicious at every version;
# the versions here are the ones JFrog's table names.
# OSV MAL-2026-14336/14337/14333/14338/14339; RUSTSEC-2026-0260/0262/0264/0265.
# 5 packages, 5 versions.
# ------------------------------------------------------------------------
crates:append-only-vec:0.1.9
crates:arrayref:0.3.10
crates:internment:0.8.7
crates:proc-macro-en:1.0.10
crates:proc-macro1:1.0.107

# ------------------------------------------------------------------------
# 2026-10-05 — @subql/common 5.8.3 (StepSecurity, Corgea). Release workflow
# hijacked and shipped through trusted publishing. Runs on install AND import.
# ~5.8.2 ranges in @subql/cli 6.6.3, @subql/node-core 19.3.1 and others let it
# resolve transitively. 5.8.3-onf-rt1 is a harmless canary: NOT listed.
# OSV MAL-2026-17571, GHSA-9333-3c4x-x3h5. 1 package, 1 version.
# ------------------------------------------------------------------------
@subql/common:5.8.3

# ------------------------------------------------------------------------
# 2026-10-05 — reqthrottle RubyGems campaign (SafeDep). Attacker-owned gems from
# one account: a reverse shell or downloader in extconf.rb that stays quiet on
# CI and sandboxes. First gem: entries in this file. SafeDep's CSV lists each
# gem's newest version; the 1.0.0 entries come from OSV.
# OSV MAL-2026-17567 through 17617. 42 packages, 53 versions.
# ------------------------------------------------------------------------
gem:base58-check-helper:1.0.0
gem:bip39-wordlist-utils:1.0.0
gem:bitciin:1.0.0
gem:bitcion:1.0.0
gem:bitcion-ruby:1.0.0
gem:bitcoij-ruby:1.0.0
gem:bitcoin-address-utils:1.0.0
gem:bitcoin-rpc-lite:1.0.0
gem:bitcoin-rpc-lite:1.0.3
gem:blockchain-sync-utils:1.0.0
gem:btc-wallet-tools:1.0.0
gem:btc-wallet-tools:1.0.3
gem:coinmarket-utils:1.0.0
gem:crylto-toolbox:1.0.0
gem:cryoto-toolbox:1.0.0
gem:crypti-toolbox:1.0.0
gem:crypto-key-utils:1.0.0
gem:crypto-mnemonic-tools:1.0.0
gem:crypto-mnemonic-tools:1.0.3
gem:electrum-protocol-lite:1.0.0
gem:eth-address-utils:1.0.0
gem:eth-address-utils:1.0.3
gem:eth-keystore-utils:1.0.0
gem:eth-keystore-utils:1.0.3
gem:etherdum.rb:1.0.0
gem:etheremu.rb:1.0.0
gem:ethereum-tx-helper:1.0.0
gem:hdkey-derive-helper:1.0.0
gem:kecack:1.0.0
gem:keccka:1.0.0
gem:ligbtning-invoice:1.0.0
gem:lighthing-invoice:1.0.0
gem:lightinng-invoice:1.0.0
gem:lightning-invoice-utils:1.0.0
gem:merkle-proof-lite:1.0.0
gem:rate-limit-mini:1.0.0
gem:rate-limit-mini:1.0.1
gem:req-throttle-mini:1.0.0
gem:req-throttle-mini:1.0.1
gem:request-guard:1.0.0
gem:request-guard:1.0.1
gem:solaan-ruby:1.0.0
gem:throttle-requests:1.0.0
gem:throttle-requests:1.0.1
gem:tron-rb:1.0.0
gem:tx-broadcast-utils:1.0.0
gem:utxo-set-utils:1.0.0
gem:wallet-backup-tool:1.0.0
gem:wallet-crypto-utils:1.0.0
gem:wallet-crypto-utils:1.0.3
gem:web3-eth-utils:1.0.0
gem:web3-eth-utils:1.0.3
gem:web3-sign-helper:1.0.0

# ------------------------------------------------------------------------
# 2026-09 to 10 — MALFEX npm (The Hacker News, SafeDep). Attacker-owned packages,
# about 40,767 downloads, 37,419 of them function-flag. A planted AGENTS.md
# tricked an AI agent into installing function-color. Versions from OSV.
# OSV MAL-2026-17648, 17647, 16385, 16384, 16383, 17320, 17216, 17218, 17330,
# 17332, 18196. 11 packages, 26 versions.
# ------------------------------------------------------------------------
cdn-img-fetch:1.0.0
cdn-img-fetch:1.0.1
cdn-img-fetch:1.0.3
function-color:1.0.0
function-color:1.7.3
function-flag:1.7.3
img-to-native:1.0.0
img-to-native:1.0.1
img-to-native:1.0.2
img-to-native:1.0.3
imgbundle:1.0.0
imgbundle:1.0.1
imgbundle:1.0.2
imgdecode:1.0.0
imgdecode:1.0.1
imgdecode:1.0.2
imgdecode:1.0.3
mxdriver:0.0.1
mxdriver:0.0.2
native-runner:1.0.0
native-runner:1.0.1
native-runner:1.0.2
native-runner:1.0.3
runhelper:1.0.0
tldriver:0.0.1
tlxbnhd:0.0.1

# ------------------------------------------------------------------------
# 2026-10-19 to 27 — testmetest npm worm, a Miasma/Shai-Hulud descendant with the
# token-revocation wiper (SafeDep, JFrog). JFrog found 42 armed repositories
# across 11 owners. @testsecuiitytestme/cache-helper starts on import, so
# --ignore-scripts does not protect.
# Union of JFrog's table and OSV. Sources differ, and a version one of them
# marks malicious is kept: OSV omits event-bus-lite 0.0.1/0.0.2 and
# event-emitter 3.0.0/3.0.1, and JFrog lists event-emitter 1.0.4/1.0.5 as
# benign. OSV alone adds cache-helper 1.0.9 and 1.1.0-1.1.3, native-helper 0.0.2,
# path-stream-utils 0.0.3/0.0.4 and @testsecuiitytestme 1.0.7. JFrog alone gives
# npm-publish 1.0.1 and retry-utils 1.0.3. OSV also lists 0.0.0-stage stubs for
# three packages, which SafeDep and JFrog mark benign: NOT listed.
# test-brotli and test-brotli2 1.0.0 are armed, unlike the other 1.0.0 decoys.
# testmgkregme is the earlier cluster package (MAL-2026-16317), removed 10-12.
# OSV MAL-2026-18177 to 18182, 18185, 18186, 18292, 18329, 18330, 18333, 18358.
# 16 packages, 46 versions.
# ------------------------------------------------------------------------
@iobandamwer/cache-helper:1.0.2
@iobandamwer/cache-helper:1.0.3
@iobandamwer/cache-helper:1.0.4
@iobandamwer/cache-helper:1.0.5
@iobandamwer/cache-helper:1.0.6
@iobandamwer/cache-helper:1.0.7
@iobandamwer/cache-helper:1.0.8
@iobandamwer/cache-helper:1.0.9
@iobandamwer/cache-helper:1.1.0
@iobandamwer/cache-helper:1.1.1
@iobandamwer/cache-helper:1.1.2
@iobandamwer/cache-helper:1.1.3
@iobandamwer/native-helper:0.0.1
@iobandamwer/native-helper:0.0.2
@testsecuiitytestme/cache-helper:1.0.1
@testsecuiitytestme/cache-helper:1.0.2
@testsecuiitytestme/cache-helper:1.0.3
@testsecuiitytestme/cache-helper:1.0.4
@testsecuiitytestme/cache-helper:1.0.5
@testsecuiitytestme/cache-helper:1.0.6
@testsecuiitytestme/cache-helper:1.0.7
data-pipeline-testmetest:2.0.1
event-bus-lite-testmetest:0.0.1
event-bus-lite-testmetest:0.0.2
event-bus-lite-testmetest:0.0.6
event-emitter-testmetest:1.0.6
event-emitter-testmetest:1.0.7
event-emitter-testmetest:3.0.0
event-emitter-testmetest:3.0.1
event-emitter-testmetest:4.1.0
event-emitter-testmetest:5.0.0
log-rotate-testmetest:1.0.1
log-sink-testmetest:1.0.1
net-codec-testmetest:1.0.1
npm-publish-testmetest:1.0.1
path-stream-utils-testmetest:0.0.1
path-stream-utils-testmetest:0.0.2
path-stream-utils-testmetest:0.0.3
path-stream-utils-testmetest:0.0.4
pixel-map-testmetest:0.0.1
pixel-map-testmetest:0.0.2
pixel-map-testmetest:0.0.3
retry-utils-testmetest:1.0.3
test-brotli-testmetest:1.0.0
test-brotli2-testmetest:1.0.0
testmgkregme:1.0.1

# ------------------------------------------------------------------------
# 2026-10-21 — LiteLLM 1.107.0 (Microsoft, StepSecurity, Datadog, Aikido, Wiz,
# OX Security). All 7 wheels carry cook.pth, cook.py and sitecustomize.py, so
# the stealer runs at every Python start. The release workflow was pointed at
# the lookalike repository Berri-AI/litellm. Clean: 1.107.0rc1/rc2 and 1.106.x.
# No vendor attributes it to TeamPCP or Shai-Hulud. Not the same as the March
# compromise (1.82.7, 1.82.8). OSV has no October record yet. 1 package, 1 version.
# ------------------------------------------------------------------------
pypi:litellm:1.107.0