@cyberhub/trust-colors 1.0.9 → 1.0.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +4 -4
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -6,7 +6,7 @@
6
6
 
7
7
  ## TL;DR
8
8
 
9
- - **1 vulnerability found** (1 critical, 0 high)
9
+ - **Security incident detected** — compromised via account takeover/sabotage
10
10
  - Consider switching to **chalk** (Most popular terminal color library)
11
11
  - **Action required:** Review flags below and upgrade or replace this package
12
12
 
@@ -26,8 +26,8 @@ Community: █████████░░░░░░░░░░░
26
26
  ### Why this score?
27
27
 
28
28
  - Maintainer Trust is 44 because: single maintainer (bus factor risk)
29
- - Supply Chain is 10 because: 1 known CVEs, in breach database
30
- - Community is 47 because: no GitHub repo found
29
+ - Supply Chain is 10 because: 1 security incident(s) in breach database, in breach database
30
+ - Community is 47 because: no public GitHub repo linked (may be private or on another platform)
31
31
 
32
32
  ## ⚠️ Security Incident
33
33
 
@@ -37,7 +37,7 @@ This package was compromised via account takeover/sabotage (no CVE assigned). Se
37
37
 
38
38
  - 🔴 **CRITICAL**: Package name "colors" is 2 edit(s) from popular "cors"
39
39
  - 🔴 **CRITICAL**: HISTORICAL BREACH: Maintainer sabotaged with infinite loop (2022)
40
- - 🔴 **CRITICAL**: 1 CRITICAL vulnerability(ies) from live CVE databases
40
+ - 🔴 **CRITICAL**: 1 CRITICAL security incident from breach database (no CVE assigned)
41
41
  - 🔴 **CRITICAL**: Maintainer "marak" has history of package sabotage
42
42
 
43
43
  ## 🛠️ What Should You Do?
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@cyberhub/trust-colors",
3
- "version": "1.0.9",
4
- "description": "Security Trust Report: colors@1.4.0 — 47/100 (C, caution). 1 vulnerability found. Maintainer risk, supply chain analysis from 8 security databases.",
3
+ "version": "1.0.10",
4
+ "description": "Security Trust Report: colors@1.4.0 — 47/100 (C, caution). Security incident detected. Maintainer risk, supply chain analysis from 8 security databases.",
5
5
  "keywords": [
6
6
  "colors",
7
7
  "colors",