penthera 1.7.0 → 1.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (163) hide show
  1. package/CHANGELOG.md +315 -0
  2. package/README.md +139 -76
  3. package/SECURITY.md +8 -6
  4. package/docs/examples/pr-dependency-review.yml +1 -1
  5. package/lib/adaptive-probes.js +3 -3
  6. package/lib/advisories/evidence.js +248 -0
  7. package/lib/advisories/index.js +228 -0
  8. package/lib/advisories/products.js +83 -0
  9. package/lib/advisories/versions.js +65 -0
  10. package/lib/agents/hidden-content.js +122 -11
  11. package/lib/agents/index.js +26 -6
  12. package/lib/agents/lock.js +33 -5
  13. package/lib/agents/rules.js +33 -4
  14. package/lib/compliance/index.js +4 -4
  15. package/lib/crawler.js +12 -15
  16. package/lib/deps/capabilities.js +21 -5
  17. package/lib/deps/findings.js +309 -0
  18. package/lib/deps/index.js +13 -272
  19. package/lib/deps/iocs.js +74 -0
  20. package/lib/deps/lockfile.js +3 -8
  21. package/lib/deps/online.js +8 -3
  22. package/lib/deps/popular-packages.json.gz +0 -0
  23. package/lib/deps/popular-pypi.json.gz +0 -0
  24. package/lib/deps/python/capabilities.js +16 -3
  25. package/lib/deps/python/index.js +5 -1
  26. package/lib/deps/python/lockfiles.js +11 -5
  27. package/lib/deps/python/source.js +75 -26
  28. package/lib/deps/python/toml.js +15 -3
  29. package/lib/deps/source.js +28 -9
  30. package/lib/deps/typosquat.js +30 -5
  31. package/lib/fix/apply.js +253 -34
  32. package/lib/fix/index.js +7 -4
  33. package/lib/fix/model.js +25 -5
  34. package/lib/fix/util.js +6 -2
  35. package/lib/fuzzer.js +3 -3
  36. package/lib/git.js +65 -0
  37. package/lib/hook/index.js +157 -73
  38. package/lib/hook/policy.js +10 -4
  39. package/lib/install/index.js +4 -7
  40. package/lib/machine.js +0 -13
  41. package/lib/memory/store.js +11 -4
  42. package/lib/nuclei-loader.js +0 -25
  43. package/lib/owasp-wstg.js +4 -0
  44. package/lib/plugins.js +1 -1
  45. package/lib/provenance.js +1 -0
  46. package/lib/recon.js +12 -31
  47. package/lib/references.json +224 -0
  48. package/lib/retirejs.js +4 -4
  49. package/lib/rules/advisories/advisories.json +186 -0
  50. package/lib/rules/advisories/eol.json +413 -0
  51. package/lib/rules/advisories/pack.json +20 -0
  52. package/lib/rules/advisories/pack.json.sig +6 -0
  53. package/lib/rules/allowed_signers +13 -0
  54. package/lib/rules/core/agent-exec.json +29 -0
  55. package/lib/rules/core/agent-instructions.json +17 -0
  56. package/lib/rules/core/pack.json +30 -0
  57. package/lib/rules/core/pack.json.sig +6 -0
  58. package/lib/rules/core/secrets.json +161 -0
  59. package/lib/rules/core/templates.json +52 -0
  60. package/lib/rules/index.js +107 -0
  61. package/lib/rules/ioc-2025-2026/files.json +43 -0
  62. package/lib/rules/ioc-2025-2026/hosts.json +35 -0
  63. package/lib/rules/ioc-2025-2026/pack.json +25 -0
  64. package/lib/rules/ioc-2025-2026/pack.json.sig +6 -0
  65. package/lib/rules/ioc-2025-2026/packages.json +1048 -0
  66. package/lib/rules/pack.js +452 -0
  67. package/lib/rules/regex-guard.js +81 -9
  68. package/lib/rules/sshsig.js +205 -0
  69. package/lib/templates.js +24 -20
  70. package/lib/tmp.js +21 -0
  71. package/lib/whitebox/frameworks.js +1 -1
  72. package/lib/whitebox/secrets.js +117 -41
  73. package/package.json +12 -4
  74. package/scripts/rules/build-pack.mjs +80 -0
  75. package/scripts/rules/check-bundled.mjs +30 -0
  76. package/scripts/rules/sign-pack.sh +32 -0
  77. package/skills/penthera/SKILL.md +16 -15
  78. package/src/agent/git.js +147 -14
  79. package/src/agent/loop.js +165 -46
  80. package/src/cli/agent.js +11 -5
  81. package/src/cli/deps.js +0 -2
  82. package/src/cli/detect.js +14 -7
  83. package/src/cli/fix.js +26 -8
  84. package/src/cli/hook.js +2 -1
  85. package/src/cli/onboarding.js +14 -6
  86. package/src/cli/report-outputs.js +1 -0
  87. package/src/cli/rules.js +144 -0
  88. package/src/cli/ui.js +43 -10
  89. package/src/cli.js +24 -1
  90. package/src/report/evidence.js +105 -21
  91. package/src/report/footer.js +1 -1
  92. package/src/report/md-escape.js +8 -0
  93. package/src/scan-repo.js +6 -0
  94. package/src/scan-url.js +11 -3
  95. package/src/ui/api/data.js +39 -6
  96. package/src/ui/api/routes.js +44 -11
  97. package/src/ui/api/runs.js +32 -7
  98. package/src/ui/security.js +20 -23
  99. package/src/ui/server.js +52 -27
  100. package/src/ui/static/app.css +583 -213
  101. package/src/ui/static/favicon.svg +1 -1
  102. package/src/ui/static/fonts/DepartureMono-LICENSE.txt +93 -0
  103. package/src/ui/static/fonts/DepartureMono-Regular.woff2 +0 -0
  104. package/src/ui/static/index.html +5 -4
  105. package/src/ui/static/js/api.js +114 -6
  106. package/src/ui/static/js/app.js +81 -42
  107. package/src/ui/static/js/center.js +246 -133
  108. package/src/ui/static/js/charts.js +99 -18
  109. package/src/ui/static/js/copy.js +68 -9
  110. package/src/ui/static/js/dialog.js +152 -0
  111. package/src/ui/static/js/left.js +23 -60
  112. package/src/ui/static/js/menubar.js +170 -0
  113. package/src/ui/static/js/onboarding.js +104 -0
  114. package/src/ui/static/js/panels.js +186 -0
  115. package/src/ui/static/js/right.js +69 -188
  116. package/src/ui/static/js/state.js +36 -5
  117. package/src/ui/static/logo.svg +10 -0
  118. package/src/ui/static/mark.svg +3 -0
  119. package/src/utils/http.js +162 -13
  120. package/docs/METHODOLOGY.md +0 -375
  121. package/docs/commands/README.md +0 -24
  122. package/docs/commands/action.md +0 -21
  123. package/docs/commands/agents.md +0 -38
  124. package/docs/commands/deps.md +0 -115
  125. package/docs/commands/fix.md +0 -53
  126. package/docs/commands/hook.md +0 -69
  127. package/docs/commands/init.md +0 -114
  128. package/docs/commands/install.md +0 -53
  129. package/docs/commands/scan.md +0 -100
  130. package/docs/commands/skill.md +0 -58
  131. package/docs/compare/README.md +0 -25
  132. package/docs/compare/github.md +0 -60
  133. package/docs/compare/semgrep.md +0 -54
  134. package/docs/compare/snyk.md +0 -62
  135. package/docs/compare/socket.md +0 -78
  136. package/docs/compare/zap.md +0 -59
  137. package/docs/compliance-cra.md +0 -141
  138. package/docs/compliance-nis2.md +0 -168
  139. package/docs/dashboard.md +0 -187
  140. package/docs/evidence.md +0 -162
  141. package/docs/funding/due-diligence-checklist.md +0 -79
  142. package/docs/funding/nlnet-ngi-zero-draft.md +0 -273
  143. package/docs/funding/partner-one-pager.md +0 -84
  144. package/docs/funding/sponsor-tiers.md +0 -81
  145. package/docs/index.md +0 -81
  146. package/docs/internal-audit.md +0 -83
  147. package/docs/local-loop.md +0 -276
  148. package/docs/marketing.md +0 -151
  149. package/docs/owasp-wstg-coverage.md +0 -79
  150. package/docs/plan.md +0 -102
  151. package/docs/privacy.md +0 -38
  152. package/docs/references.bib +0 -559
  153. package/docs/references.md +0 -119
  154. package/docs/release-plan.md +0 -228
  155. package/docs/research/socket-positioning-notes.md +0 -183
  156. package/docs/use-cases/README.md +0 -14
  157. package/docs/use-cases/agencies.md +0 -71
  158. package/docs/use-cases/ai-coding-teams.md +0 -81
  159. package/docs/use-cases/eu-sme-compliance.md +0 -68
  160. package/docs/use-cases/open-source-maintainers.md +0 -75
  161. package/docs/use-cases/solo-founder.md +0 -65
  162. package/lib/deps/popular-packages.json +0 -1
  163. package/lib/deps/popular-pypi.json +0 -1
@@ -0,0 +1,1048 @@
1
+ {
2
+ "kind": "ioc-package",
3
+ "rules": [
4
+ {
5
+ "id": "s1ngularity-nx",
6
+ "campaign": "s1ngularity (Nx compromise)",
7
+ "description": "Malicious nx and @nx/* versions published 2025-08-26 with a postinstall telemetry.js that used local AI CLIs to inventory secrets and pushed them to a public s1ngularity-repository repo in the victim's GitHub account. Versions from the GHSA's affected-version data (it lists @nx/key 5.0.7 beyond the prose).",
8
+ "source": "https://github.com/advisories/GHSA-cxm3-wv7p-598c",
9
+ "date": "2025-08-26",
10
+ "confidence": "confirmed",
11
+ "references": ["ohm2020backstabber", "ladisa2023sok"],
12
+ "packages": [
13
+ {"name": "@nx/devkit", "versions": ["20.9.0", "21.5.0"]},
14
+ {"name": "@nx/enterprise-cloud", "versions": ["3.2.0"]},
15
+ {"name": "@nx/eslint", "versions": ["21.5.0"]},
16
+ {"name": "@nx/js", "versions": ["20.9.0", "21.5.0"]},
17
+ {"name": "@nx/key", "versions": ["3.2.0", "5.0.7"]},
18
+ {"name": "@nx/node", "versions": ["20.9.0", "21.5.0"]},
19
+ {"name": "@nx/workspace", "versions": ["20.9.0", "21.5.0"]},
20
+ {"name": "nx", "versions": ["20.9.0", "20.10.0", "20.11.0", "20.12.0", "21.5.0", "21.6.0", "21.7.0", "21.8.0"]}
21
+ ]
22
+ },
23
+ {
24
+ "id": "shai-hulud-1",
25
+ "campaign": "Shai-Hulud worm (first wave)",
26
+ "description": "Self-replicating npm worm starting from @ctrl/tinycolor 4.1.1/4.1.2: bundle.js ran TruffleHog over the machine, exfiltrated to a webhook.site endpoint and republished the victim's own packages. List: StepSecurity's Affected Packages table.",
27
+ "source": "https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised",
28
+ "date": "2025-09-15",
29
+ "confidence": "confirmed",
30
+ "references": ["ohm2020backstabber", "ladisa2023sok"],
31
+ "packages": [
32
+ {"name": "@ahmedhfarag/ngx-perfect-scrollbar", "versions": ["20.0.20"]},
33
+ {"name": "@ahmedhfarag/ngx-virtual-scroller", "versions": ["4.0.4"]},
34
+ {"name": "@art-ws/common", "versions": ["2.0.22", "2.0.28"]},
35
+ {"name": "@art-ws/config-eslint", "versions": ["2.0.4", "2.0.5"]},
36
+ {"name": "@art-ws/config-ts", "versions": ["2.0.7", "2.0.8"]},
37
+ {"name": "@art-ws/db-context", "versions": ["2.0.24"]},
38
+ {"name": "@art-ws/di", "versions": ["2.0.28", "2.0.32"]},
39
+ {"name": "@art-ws/di-node", "versions": ["2.0.13"]},
40
+ {"name": "@art-ws/eslint", "versions": ["1.0.5", "1.0.6"]},
41
+ {"name": "@art-ws/fastify-http-server", "versions": ["2.0.24", "2.0.27"]},
42
+ {"name": "@art-ws/http-server", "versions": ["2.0.21", "2.0.25"]},
43
+ {"name": "@art-ws/openapi", "versions": ["0.1.9", "0.1.12"]},
44
+ {"name": "@art-ws/package-base", "versions": ["1.0.5", "1.0.6"]},
45
+ {"name": "@art-ws/prettier", "versions": ["1.0.5", "1.0.6"]},
46
+ {"name": "@art-ws/slf", "versions": ["2.0.15", "2.0.22"]},
47
+ {"name": "@art-ws/ssl-info", "versions": ["1.0.9", "1.0.10"]},
48
+ {"name": "@art-ws/web-app", "versions": ["1.0.3", "1.0.4"]},
49
+ {"name": "@crowdstrike/commitlint", "versions": ["8.1.1", "8.1.2"]},
50
+ {"name": "@crowdstrike/falcon-shoelace", "versions": ["0.4.1", "0.4.2"]},
51
+ {"name": "@crowdstrike/foundry-js", "versions": ["0.19.1", "0.19.2"]},
52
+ {"name": "@crowdstrike/glide-core", "versions": ["0.34.2", "0.34.3"]},
53
+ {"name": "@crowdstrike/logscale-dashboard", "versions": ["1.205.1", "1.205.2"]},
54
+ {"name": "@crowdstrike/logscale-file-editor", "versions": ["1.205.1", "1.205.2"]},
55
+ {"name": "@crowdstrike/logscale-parser-edit", "versions": ["1.205.1", "1.205.2"]},
56
+ {"name": "@crowdstrike/logscale-search", "versions": ["1.205.1", "1.205.2"]},
57
+ {"name": "@crowdstrike/tailwind-toucan-base", "versions": ["5.0.1", "5.0.2"]},
58
+ {"name": "@ctrl/deluge", "versions": ["7.2.1", "7.2.2"]},
59
+ {"name": "@ctrl/golang-template", "versions": ["1.4.2", "1.4.3"]},
60
+ {"name": "@ctrl/magnet-link", "versions": ["4.0.3", "4.0.4"]},
61
+ {"name": "@ctrl/ngx-codemirror", "versions": ["7.0.1", "7.0.2"]},
62
+ {"name": "@ctrl/ngx-csv", "versions": ["6.0.1", "6.0.2"]},
63
+ {"name": "@ctrl/ngx-emoji-mart", "versions": ["9.2.1", "9.2.2"]},
64
+ {"name": "@ctrl/ngx-rightclick", "versions": ["4.0.1", "4.0.2"]},
65
+ {"name": "@ctrl/qbittorrent", "versions": ["9.7.1", "9.7.2"]},
66
+ {"name": "@ctrl/react-adsense", "versions": ["2.0.1", "2.0.2"]},
67
+ {"name": "@ctrl/shared-torrent", "versions": ["6.3.1", "6.3.2"]},
68
+ {"name": "@ctrl/tinycolor", "versions": ["4.1.1", "4.1.2"]},
69
+ {"name": "@ctrl/torrent-file", "versions": ["4.1.1", "4.1.2"]},
70
+ {"name": "@ctrl/transmission", "versions": ["7.3.1"]},
71
+ {"name": "@ctrl/ts-base32", "versions": ["4.0.1", "4.0.2"]},
72
+ {"name": "@hestjs/core", "versions": ["0.2.1"]},
73
+ {"name": "@hestjs/cqrs", "versions": ["0.1.6"]},
74
+ {"name": "@hestjs/demo", "versions": ["0.1.2"]},
75
+ {"name": "@hestjs/eslint-config", "versions": ["0.1.2"]},
76
+ {"name": "@hestjs/logger", "versions": ["0.1.6"]},
77
+ {"name": "@hestjs/scalar", "versions": ["0.1.7"]},
78
+ {"name": "@hestjs/validation", "versions": ["0.1.6"]},
79
+ {"name": "@nativescript-community/arraybuffers", "versions": ["1.1.6", "1.1.7", "1.1.8"]},
80
+ {"name": "@nativescript-community/gesturehandler", "versions": ["2.0.35"]},
81
+ {"name": "@nativescript-community/perms", "versions": ["3.0.5", "3.0.6", "3.0.7", "3.0.8"]},
82
+ {"name": "@nativescript-community/sentry", "versions": ["4.6.43"]},
83
+ {"name": "@nativescript-community/sqlite", "versions": ["3.5.2", "3.5.3", "3.5.4", "3.5.5"]},
84
+ {"name": "@nativescript-community/text", "versions": ["1.6.9", "1.6.10", "1.6.11", "1.6.12", "1.6.13"]},
85
+ {"name": "@nativescript-community/typeorm", "versions": ["0.2.30", "0.2.31", "0.2.32", "0.2.33"]},
86
+ {"name": "@nativescript-community/ui-collectionview", "versions": ["6.0.6"]},
87
+ {"name": "@nativescript-community/ui-document-picker", "versions": ["1.1.27", "1.1.28"]},
88
+ {"name": "@nativescript-community/ui-drawer", "versions": ["0.1.30"]},
89
+ {"name": "@nativescript-community/ui-image", "versions": ["4.5.6"]},
90
+ {"name": "@nativescript-community/ui-label", "versions": ["1.3.35", "1.3.36", "1.3.37"]},
91
+ {"name": "@nativescript-community/ui-material-bottom-navigation", "versions": ["7.2.72", "7.2.73", "7.2.74", "7.2.75"]},
92
+ {"name": "@nativescript-community/ui-material-bottomsheet", "versions": ["7.2.72"]},
93
+ {"name": "@nativescript-community/ui-material-core", "versions": ["7.2.72", "7.2.73", "7.2.74", "7.2.75", "7.2.76"]},
94
+ {"name": "@nativescript-community/ui-material-core-tabs", "versions": ["7.2.72", "7.2.73", "7.2.74", "7.2.75", "7.2.76"]},
95
+ {"name": "@nativescript-community/ui-material-ripple", "versions": ["7.2.72", "7.2.73", "7.2.74", "7.2.75"]},
96
+ {"name": "@nativescript-community/ui-material-tabs", "versions": ["7.2.72", "7.2.73", "7.2.74", "7.2.75"]},
97
+ {"name": "@nativescript-community/ui-pager", "versions": ["14.1.36", "14.1.37", "14.1.38"]},
98
+ {"name": "@nativescript-community/ui-pulltorefresh", "versions": ["2.5.4", "2.5.5", "2.5.6", "2.5.7"]},
99
+ {"name": "@nexe/config-manager", "versions": ["0.1.1"]},
100
+ {"name": "@nexe/eslint-config", "versions": ["0.1.1"]},
101
+ {"name": "@nexe/logger", "versions": ["0.1.3"]},
102
+ {"name": "@nstudio/angular", "versions": ["20.0.4", "20.0.5", "20.0.6"]},
103
+ {"name": "@nstudio/focus", "versions": ["20.0.4", "20.0.5", "20.0.6"]},
104
+ {"name": "@nstudio/nativescript-checkbox", "versions": ["2.0.6", "2.0.7", "2.0.8", "2.0.9"]},
105
+ {"name": "@nstudio/nativescript-loading-indicator", "versions": ["5.0.1", "5.0.2", "5.0.3", "5.0.4"]},
106
+ {"name": "@nstudio/ui-collectionview", "versions": ["5.1.11", "5.1.12", "5.1.13", "5.1.14"]},
107
+ {"name": "@nstudio/web", "versions": ["20.0.4"]},
108
+ {"name": "@nstudio/web-angular", "versions": ["20.0.4"]},
109
+ {"name": "@nstudio/xplat", "versions": ["20.0.5", "20.0.6", "20.0.7"]},
110
+ {"name": "@nstudio/xplat-utils", "versions": ["20.0.5", "20.0.6", "20.0.7"]},
111
+ {"name": "@operato/board", "versions": ["9.0.36", "9.0.37", "9.0.38", "9.0.39", "9.0.40", "9.0.41", "9.0.42", "9.0.43", "9.0.44", "9.0.45", "9.0.46", "9.0.47", "9.0.48", "9.0.49", "9.0.50", "9.0.51"]},
112
+ {"name": "@operato/data-grist", "versions": ["9.0.29", "9.0.35", "9.0.36", "9.0.37"]},
113
+ {"name": "@operato/graphql", "versions": ["9.0.22", "9.0.35", "9.0.36", "9.0.37", "9.0.38", "9.0.39", "9.0.40", "9.0.41", "9.0.42", "9.0.43", "9.0.44", "9.0.45", "9.0.46"]},
114
+ {"name": "@operato/headroom", "versions": ["9.0.2", "9.0.35", "9.0.36", "9.0.37"]},
115
+ {"name": "@operato/help", "versions": ["9.0.35", "9.0.36", "9.0.37", "9.0.38", "9.0.39", "9.0.40", "9.0.41", "9.0.42", "9.0.43", "9.0.44", "9.0.45", "9.0.46"]},
116
+ {"name": "@operato/i18n", "versions": ["9.0.35", "9.0.36", "9.0.37"]},
117
+ {"name": "@operato/input", "versions": ["9.0.27", "9.0.35", "9.0.36", "9.0.37", "9.0.38", "9.0.39", "9.0.40", "9.0.41", "9.0.42", "9.0.43", "9.0.44", "9.0.45", "9.0.46", "9.0.47", "9.0.48"]},
118
+ {"name": "@operato/layout", "versions": ["9.0.35", "9.0.36", "9.0.37"]},
119
+ {"name": "@operato/popup", "versions": ["9.0.22", "9.0.35", "9.0.36", "9.0.37", "9.0.38", "9.0.39", "9.0.40", "9.0.41", "9.0.42", "9.0.43", "9.0.44", "9.0.45", "9.0.46", "9.0.49"]},
120
+ {"name": "@operato/pull-to-refresh", "versions": ["9.0.36", "9.0.37", "9.0.38", "9.0.39", "9.0.40", "9.0.41", "9.0.42"]},
121
+ {"name": "@operato/shell", "versions": ["9.0.22", "9.0.35", "9.0.36", "9.0.37", "9.0.38", "9.0.39"]},
122
+ {"name": "@operato/styles", "versions": ["9.0.2", "9.0.35", "9.0.36", "9.0.37"]},
123
+ {"name": "@operato/utils", "versions": ["9.0.22", "9.0.35", "9.0.36", "9.0.37", "9.0.38", "9.0.39", "9.0.40", "9.0.41", "9.0.42", "9.0.43", "9.0.44", "9.0.45", "9.0.46", "9.0.49"]},
124
+ {"name": "@teselagen/bio-parsers", "versions": ["0.4.30"]},
125
+ {"name": "@teselagen/bounce-loader", "versions": ["0.3.16", "0.3.17"]},
126
+ {"name": "@teselagen/file-utils", "versions": ["0.3.22"]},
127
+ {"name": "@teselagen/liquibase-tools", "versions": ["0.4.1"]},
128
+ {"name": "@teselagen/ove", "versions": ["0.7.40"]},
129
+ {"name": "@teselagen/range-utils", "versions": ["0.3.14", "0.3.15"]},
130
+ {"name": "@teselagen/react-list", "versions": ["0.8.19", "0.8.20"]},
131
+ {"name": "@teselagen/react-table", "versions": ["6.10.19", "6.10.20", "6.10.22"]},
132
+ {"name": "@teselagen/sequence-utils", "versions": ["0.3.34"]},
133
+ {"name": "@teselagen/ui", "versions": ["0.9.10"]},
134
+ {"name": "@thangved/callback-window", "versions": ["1.1.4"]},
135
+ {"name": "@things-factory/attachment-base", "versions": ["9.0.43", "9.0.44", "9.0.45", "9.0.46", "9.0.47", "9.0.48", "9.0.49", "9.0.50"]},
136
+ {"name": "@things-factory/auth-base", "versions": ["9.0.43", "9.0.44", "9.0.45"]},
137
+ {"name": "@things-factory/email-base", "versions": ["9.0.42", "9.0.43", "9.0.44", "9.0.45", "9.0.46", "9.0.47", "9.0.48", "9.0.49", "9.0.50", "9.0.51", "9.0.52", "9.0.53", "9.0.54"]},
138
+ {"name": "@things-factory/env", "versions": ["9.0.42", "9.0.43", "9.0.44", "9.0.45"]},
139
+ {"name": "@things-factory/integration-base", "versions": ["9.0.43", "9.0.44", "9.0.45"]},
140
+ {"name": "@things-factory/integration-marketplace", "versions": ["9.0.43", "9.0.44", "9.0.45"]},
141
+ {"name": "@things-factory/shell", "versions": ["9.0.43", "9.0.44", "9.0.45"]},
142
+ {"name": "@tnf-dev/api", "versions": ["1.0.8"]},
143
+ {"name": "@tnf-dev/core", "versions": ["1.0.8"]},
144
+ {"name": "@tnf-dev/js", "versions": ["1.0.8"]},
145
+ {"name": "@tnf-dev/mui", "versions": ["1.0.8"]},
146
+ {"name": "@tnf-dev/react", "versions": ["1.0.8"]},
147
+ {"name": "@ui-ux-gang/devextreme-angular-rpk", "versions": ["24.1.7"]},
148
+ {"name": "@yoobic/design-system", "versions": ["6.5.17"]},
149
+ {"name": "@yoobic/jpeg-camera-es6", "versions": ["1.0.13"]},
150
+ {"name": "@yoobic/yobi", "versions": ["8.7.53"]},
151
+ {"name": "airchief", "versions": ["0.3.1"]},
152
+ {"name": "airpilot", "versions": ["0.8.8"]},
153
+ {"name": "angulartics2", "versions": ["14.1.1", "14.1.2"]},
154
+ {"name": "browser-webdriver-downloader", "versions": ["3.0.8"]},
155
+ {"name": "capacitor-notificationhandler", "versions": ["0.0.2", "0.0.3"]},
156
+ {"name": "capacitor-plugin-healthapp", "versions": ["0.0.2", "0.0.3"]},
157
+ {"name": "capacitor-plugin-ihealth", "versions": ["1.1.8", "1.1.9"]},
158
+ {"name": "capacitor-plugin-vonage", "versions": ["1.0.2", "1.0.3"]},
159
+ {"name": "capacitorandroidpermissions", "versions": ["0.0.4", "0.0.5"]},
160
+ {"name": "config-cordova", "versions": ["0.8.5"]},
161
+ {"name": "cordova-plugin-voxeet2", "versions": ["1.0.24"]},
162
+ {"name": "cordova-voxeet", "versions": ["1.0.32"]},
163
+ {"name": "create-hest-app", "versions": ["0.1.9"]},
164
+ {"name": "db-evo", "versions": ["1.1.4", "1.1.5"]},
165
+ {"name": "devextreme-angular-rpk", "versions": ["21.2.8"]},
166
+ {"name": "ember-browser-services", "versions": ["5.0.2", "5.0.3"]},
167
+ {"name": "ember-headless-form", "versions": ["1.1.2", "1.1.3"]},
168
+ {"name": "ember-headless-form-yup", "versions": ["1.0.1"]},
169
+ {"name": "ember-headless-table", "versions": ["2.1.5", "2.1.6"]},
170
+ {"name": "ember-url-hash-polyfill", "versions": ["1.0.12", "1.0.13"]},
171
+ {"name": "ember-velcro", "versions": ["2.2.1", "2.2.2"]},
172
+ {"name": "encounter-playground", "versions": ["0.0.2", "0.0.3", "0.0.4", "0.0.5"]},
173
+ {"name": "eslint-config-crowdstrike", "versions": ["11.0.2", "11.0.3"]},
174
+ {"name": "eslint-config-crowdstrike-node", "versions": ["4.0.3", "4.0.4"]},
175
+ {"name": "eslint-config-teselagen", "versions": ["6.1.7", "6.1.8"]},
176
+ {"name": "globalize-rpk", "versions": ["1.7.4"]},
177
+ {"name": "graphql-sequelize-teselagen", "versions": ["5.3.8", "5.3.9"]},
178
+ {"name": "html-to-base64-image", "versions": ["1.0.2"]},
179
+ {"name": "json-rules-engine-simplified", "versions": ["0.2.1", "0.2.4"]},
180
+ {"name": "jumpgate", "versions": ["0.0.2"]},
181
+ {"name": "koa2-swagger-ui", "versions": ["5.11.1", "5.11.2"]},
182
+ {"name": "mcfly-semantic-release", "versions": ["1.3.1"]},
183
+ {"name": "mcp-knowledge-base", "versions": ["0.0.2"]},
184
+ {"name": "mcp-knowledge-graph", "versions": ["1.2.1"]},
185
+ {"name": "mobioffice-cli", "versions": ["1.0.3"]},
186
+ {"name": "monorepo-next", "versions": ["13.0.1", "13.0.2"]},
187
+ {"name": "mstate-angular", "versions": ["0.4.4"]},
188
+ {"name": "mstate-cli", "versions": ["0.4.7"]},
189
+ {"name": "mstate-dev-react", "versions": ["1.1.1"]},
190
+ {"name": "mstate-react", "versions": ["1.6.5"]},
191
+ {"name": "ng2-file-upload", "versions": ["7.0.2", "7.0.3", "8.0.1", "8.0.2", "8.0.3", "9.0.1"]},
192
+ {"name": "ngx-bootstrap", "versions": ["18.1.4", "19.0.3", "19.0.4", "20.0.3", "20.0.4", "20.0.5"]},
193
+ {"name": "ngx-color", "versions": ["10.0.1", "10.0.2"]},
194
+ {"name": "ngx-toastr", "versions": ["19.0.1", "19.0.2"]},
195
+ {"name": "ngx-trend", "versions": ["8.0.1"]},
196
+ {"name": "ngx-ws", "versions": ["1.1.5", "1.1.6"]},
197
+ {"name": "oradm-to-gql", "versions": ["35.0.14", "35.0.15"]},
198
+ {"name": "oradm-to-sqlz", "versions": ["1.1.2", "1.1.5"]},
199
+ {"name": "ove-auto-annotate", "versions": ["0.0.9", "0.0.10"]},
200
+ {"name": "pm2-gelf-json", "versions": ["1.0.4", "1.0.5"]},
201
+ {"name": "printjs-rpk", "versions": ["1.6.1"]},
202
+ {"name": "react-complaint-image", "versions": ["0.0.32", "0.0.35"]},
203
+ {"name": "react-jsonschema-form-conditionals", "versions": ["0.3.18", "0.3.21"]},
204
+ {"name": "react-jsonschema-form-extras", "versions": ["1.0.4"]},
205
+ {"name": "react-jsonschema-rxnt-extras", "versions": ["0.4.9"]},
206
+ {"name": "remark-preset-lint-crowdstrike", "versions": ["4.0.1", "4.0.2"]},
207
+ {"name": "rxnt-authentication", "versions": ["0.0.3", "0.0.4", "0.0.5", "0.0.6"]},
208
+ {"name": "rxnt-healthchecks-nestjs", "versions": ["1.0.2", "1.0.3", "1.0.4", "1.0.5"]},
209
+ {"name": "rxnt-kue", "versions": ["1.0.4", "1.0.5", "1.0.6", "1.0.7"]},
210
+ {"name": "swc-plugin-component-annotate", "versions": ["1.9.1", "1.9.2"]},
211
+ {"name": "tbssnch", "versions": ["1.0.2"]},
212
+ {"name": "teselagen-interval-tree", "versions": ["1.1.2"]},
213
+ {"name": "tg-client-query-builder", "versions": ["2.14.4", "2.14.5"]},
214
+ {"name": "tg-redbird", "versions": ["1.3.1", "1.3.2"]},
215
+ {"name": "tg-seq-gen", "versions": ["1.0.9", "1.0.10"]},
216
+ {"name": "thangved-react-grid", "versions": ["1.0.3"]},
217
+ {"name": "ts-gaussian", "versions": ["3.0.5", "3.0.6"]},
218
+ {"name": "ts-imports", "versions": ["1.0.1", "1.0.2"]},
219
+ {"name": "tvi-cli", "versions": ["0.1.5"]},
220
+ {"name": "ve-bamreader", "versions": ["0.2.6", "0.2.7"]},
221
+ {"name": "ve-editor", "versions": ["1.0.1", "1.0.2"]},
222
+ {"name": "verror-extra", "versions": ["6.0.1"]},
223
+ {"name": "voip-callkit", "versions": ["1.0.2", "1.0.3"]},
224
+ {"name": "wdio-web-reporter", "versions": ["0.1.3"]},
225
+ {"name": "yargs-help-output", "versions": ["5.0.3"]},
226
+ {"name": "yoo-styles", "versions": ["6.0.326"]}
227
+ ]
228
+ },
229
+ {
230
+ "id": "shai-hulud-2",
231
+ "campaign": "Shai-Hulud 2.0 (Sha1-Hulud: The Second Coming)",
232
+ "description": "Second wave, uploads 2025-11-21 to 2025-11-23: a preinstall setup_bun.js installs Bun and runs bun_environment.js, which steals credentials into GitHub repos created with stolen tokens. List: Wiz Research's published CSV.",
233
+ "source": "https://github.com/wiz-sec-public/wiz-research-iocs/blob/main/reports/shai-hulud-2-packages.csv",
234
+ "date": "2025-11-24",
235
+ "confidence": "confirmed",
236
+ "references": ["ohm2020backstabber", "ladisa2023sok"],
237
+ "packages": [
238
+ {"name": "02-echo", "versions": ["0.0.7"]},
239
+ {"name": "@accordproject/concerto-analysis", "versions": ["3.24.1"]},
240
+ {"name": "@accordproject/concerto-linter", "versions": ["3.24.1"]},
241
+ {"name": "@accordproject/concerto-linter-default-ruleset", "versions": ["3.24.1"]},
242
+ {"name": "@accordproject/concerto-metamodel", "versions": ["3.12.5"]},
243
+ {"name": "@accordproject/concerto-types", "versions": ["3.24.1"]},
244
+ {"name": "@accordproject/markdown-it-cicero", "versions": ["0.16.26"]},
245
+ {"name": "@accordproject/template-engine", "versions": ["2.7.2"]},
246
+ {"name": "@actbase/css-to-react-native-transform", "versions": ["1.0.3"]},
247
+ {"name": "@actbase/native", "versions": ["0.1.32"]},
248
+ {"name": "@actbase/node-server", "versions": ["1.1.19"]},
249
+ {"name": "@actbase/react-absolute", "versions": ["0.8.3"]},
250
+ {"name": "@actbase/react-daum-postcode", "versions": ["1.0.5"]},
251
+ {"name": "@actbase/react-kakaosdk", "versions": ["0.9.27"]},
252
+ {"name": "@actbase/react-native-actionsheet", "versions": ["1.0.3"]},
253
+ {"name": "@actbase/react-native-devtools", "versions": ["0.1.3"]},
254
+ {"name": "@actbase/react-native-fast-image", "versions": ["8.5.13"]},
255
+ {"name": "@actbase/react-native-kakao-channel", "versions": ["1.0.2"]},
256
+ {"name": "@actbase/react-native-kakao-navi", "versions": ["2.0.4"]},
257
+ {"name": "@actbase/react-native-less-transformer", "versions": ["1.0.6"]},
258
+ {"name": "@actbase/react-native-naver-login", "versions": ["1.0.1"]},
259
+ {"name": "@actbase/react-native-simple-video", "versions": ["1.0.13"]},
260
+ {"name": "@actbase/react-native-tiktok", "versions": ["1.1.3"]},
261
+ {"name": "@afetcan/api", "versions": ["0.0.13"]},
262
+ {"name": "@afetcan/storage", "versions": ["0.0.27"]},
263
+ {"name": "@alaan/s2s-auth", "versions": ["2.0.3"]},
264
+ {"name": "@alexadark/amadeus-api", "versions": ["1.0.4"]},
265
+ {"name": "@alexadark/gatsby-theme-events", "versions": ["1.0.1"]},
266
+ {"name": "@alexadark/gatsby-theme-wordpress-blog", "versions": ["2.0.1"]},
267
+ {"name": "@alexadark/reusable-functions", "versions": ["1.5.1"]},
268
+ {"name": "@alexcolls/nuxt-socket.io", "versions": ["0.0.7", "0.0.8"]},
269
+ {"name": "@alexcolls/nuxt-ux", "versions": ["0.6.1", "0.6.2"]},
270
+ {"name": "@antstackio/eslint-config-antstack", "versions": ["0.0.3"]},
271
+ {"name": "@antstackio/express-graphql-proxy", "versions": ["0.2.8"]},
272
+ {"name": "@antstackio/graphql-body-parser", "versions": ["0.1.1"]},
273
+ {"name": "@antstackio/json-to-graphql", "versions": ["1.0.3"]},
274
+ {"name": "@antstackio/shelbysam", "versions": ["1.1.7"]},
275
+ {"name": "@aryanhussain/my-angular-lib", "versions": ["0.0.23"]},
276
+ {"name": "@asyncapi/avro-schema-parser", "versions": ["3.0.25", "3.0.26"]},
277
+ {"name": "@asyncapi/bundler", "versions": ["0.6.5", "0.6.6"]},
278
+ {"name": "@asyncapi/cli", "versions": ["4.1.2", "4.1.3"]},
279
+ {"name": "@asyncapi/converter", "versions": ["1.6.3", "1.6.4"]},
280
+ {"name": "@asyncapi/diff", "versions": ["0.5.1", "0.5.2"]},
281
+ {"name": "@asyncapi/dotnet-rabbitmq-template", "versions": ["1.0.1", "1.0.2"]},
282
+ {"name": "@asyncapi/edavisualiser", "versions": ["1.2.1", "1.2.2"]},
283
+ {"name": "@asyncapi/generator", "versions": ["2.8.5", "2.8.6"]},
284
+ {"name": "@asyncapi/generator-components", "versions": ["0.3.2", "0.3.3"]},
285
+ {"name": "@asyncapi/generator-helpers", "versions": ["0.2.1", "0.2.2"]},
286
+ {"name": "@asyncapi/generator-react-sdk", "versions": ["1.1.4", "1.1.5"]},
287
+ {"name": "@asyncapi/go-watermill-template", "versions": ["0.2.76", "0.2.77"]},
288
+ {"name": "@asyncapi/html-template", "versions": ["3.3.2", "3.3.3"]},
289
+ {"name": "@asyncapi/java-spring-cloud-stream-template", "versions": ["0.13.5", "0.13.6"]},
290
+ {"name": "@asyncapi/java-spring-template", "versions": ["1.6.1", "1.6.2"]},
291
+ {"name": "@asyncapi/java-template", "versions": ["0.3.5", "0.3.6"]},
292
+ {"name": "@asyncapi/keeper", "versions": ["0.0.2", "0.0.3"]},
293
+ {"name": "@asyncapi/markdown-template", "versions": ["1.6.8", "1.6.9"]},
294
+ {"name": "@asyncapi/modelina", "versions": ["5.10.2", "5.10.3"]},
295
+ {"name": "@asyncapi/modelina-cli", "versions": ["5.10.2", "5.10.3"]},
296
+ {"name": "@asyncapi/multi-parser", "versions": ["2.2.1", "2.2.2"]},
297
+ {"name": "@asyncapi/nodejs-template", "versions": ["3.0.5", "3.0.6"]},
298
+ {"name": "@asyncapi/nodejs-ws-template", "versions": ["0.10.1", "0.10.2"]},
299
+ {"name": "@asyncapi/nunjucks-filters", "versions": ["2.1.1", "2.1.2"]},
300
+ {"name": "@asyncapi/openapi-schema-parser", "versions": ["3.0.25", "3.0.26"]},
301
+ {"name": "@asyncapi/optimizer", "versions": ["1.0.5", "1.0.6"]},
302
+ {"name": "@asyncapi/parser", "versions": ["3.4.1", "3.4.2"]},
303
+ {"name": "@asyncapi/php-template", "versions": ["0.1.1", "0.1.2"]},
304
+ {"name": "@asyncapi/problem", "versions": ["1.0.1", "1.0.2"]},
305
+ {"name": "@asyncapi/protobuf-schema-parser", "versions": ["3.5.2", "3.5.3", "3.6.1"]},
306
+ {"name": "@asyncapi/python-paho-template", "versions": ["0.2.14", "0.2.15"]},
307
+ {"name": "@asyncapi/react-component", "versions": ["2.6.6", "2.6.7"]},
308
+ {"name": "@asyncapi/server-api", "versions": ["0.16.24", "0.16.25"]},
309
+ {"name": "@asyncapi/specs", "versions": ["6.8.2", "6.8.3", "6.9.1", "6.10.1"]},
310
+ {"name": "@asyncapi/studio", "versions": ["1.0.2", "1.0.3"]},
311
+ {"name": "@asyncapi/web-component", "versions": ["2.6.6", "2.6.7"]},
312
+ {"name": "@bdkinc/knex-ibmi", "versions": ["0.5.7"]},
313
+ {"name": "@browserbasehq/bb9", "versions": ["1.2.21"]},
314
+ {"name": "@browserbasehq/director-ai", "versions": ["1.0.3"]},
315
+ {"name": "@browserbasehq/mcp", "versions": ["2.1.1"]},
316
+ {"name": "@browserbasehq/mcp-server-browserbase", "versions": ["2.4.2"]},
317
+ {"name": "@browserbasehq/sdk-functions", "versions": ["0.0.4"]},
318
+ {"name": "@browserbasehq/stagehand", "versions": ["3.0.4"]},
319
+ {"name": "@browserbasehq/stagehand-docs", "versions": ["1.0.1"]},
320
+ {"name": "@caretive/caret-cli", "versions": ["0.0.2"]},
321
+ {"name": "@chtijs/eslint-config", "versions": ["1.0.1"]},
322
+ {"name": "@clausehq/flows-step-httprequest", "versions": ["0.1.14"]},
323
+ {"name": "@clausehq/flows-step-jsontoxml", "versions": ["0.1.14"]},
324
+ {"name": "@clausehq/flows-step-mqtt", "versions": ["0.1.14"]},
325
+ {"name": "@clausehq/flows-step-sendgridemail", "versions": ["0.1.14"]},
326
+ {"name": "@clausehq/flows-step-taskscreateurl", "versions": ["0.1.14"]},
327
+ {"name": "@cllbk/ghl", "versions": ["1.3.1"]},
328
+ {"name": "@commute/bloom", "versions": ["1.0.3"]},
329
+ {"name": "@commute/market-data", "versions": ["1.0.2"]},
330
+ {"name": "@commute/market-data-chartjs", "versions": ["2.3.1"]},
331
+ {"name": "@dev-blinq/ai-qa-logic", "versions": ["1.0.19"]},
332
+ {"name": "@dev-blinq/blinqioclient", "versions": ["1.0.21"]},
333
+ {"name": "@dev-blinq/cucumber-js", "versions": ["1.0.131"]},
334
+ {"name": "@dev-blinq/cucumber_client", "versions": ["1.0.738"]},
335
+ {"name": "@dev-blinq/ui-systems", "versions": ["1.0.93"]},
336
+ {"name": "@ensdomains/address-encoder", "versions": ["1.1.5"]},
337
+ {"name": "@ensdomains/blacklist", "versions": ["1.0.1"]},
338
+ {"name": "@ensdomains/buffer", "versions": ["0.1.2"]},
339
+ {"name": "@ensdomains/ccip-read-cf-worker", "versions": ["0.0.4"]},
340
+ {"name": "@ensdomains/ccip-read-dns-gateway", "versions": ["0.1.1"]},
341
+ {"name": "@ensdomains/ccip-read-router", "versions": ["0.0.7"]},
342
+ {"name": "@ensdomains/ccip-read-worker-viem", "versions": ["0.0.4"]},
343
+ {"name": "@ensdomains/content-hash", "versions": ["3.0.1"]},
344
+ {"name": "@ensdomains/curvearithmetics", "versions": ["1.0.1"]},
345
+ {"name": "@ensdomains/cypress-metamask", "versions": ["1.2.1"]},
346
+ {"name": "@ensdomains/dnsprovejs", "versions": ["0.5.3"]},
347
+ {"name": "@ensdomains/dnssec-oracle-anchors", "versions": ["0.0.2"]},
348
+ {"name": "@ensdomains/dnssecoraclejs", "versions": ["0.2.9"]},
349
+ {"name": "@ensdomains/durin", "versions": ["0.1.2"]},
350
+ {"name": "@ensdomains/durin-middleware", "versions": ["0.0.2"]},
351
+ {"name": "@ensdomains/ens-archived-contracts", "versions": ["0.0.3"]},
352
+ {"name": "@ensdomains/ens-avatar", "versions": ["1.0.4"]},
353
+ {"name": "@ensdomains/ens-contracts", "versions": ["1.6.1"]},
354
+ {"name": "@ensdomains/ens-test-env", "versions": ["1.0.2"]},
355
+ {"name": "@ensdomains/ens-validation", "versions": ["0.1.1"]},
356
+ {"name": "@ensdomains/ensjs", "versions": ["4.0.3"]},
357
+ {"name": "@ensdomains/ensjs-react", "versions": ["0.0.5"]},
358
+ {"name": "@ensdomains/eth-ens-namehash", "versions": ["2.0.16"]},
359
+ {"name": "@ensdomains/hackathon-registrar", "versions": ["1.0.5"]},
360
+ {"name": "@ensdomains/hardhat-chai-matchers-viem", "versions": ["0.1.15"]},
361
+ {"name": "@ensdomains/hardhat-toolbox-viem-extended", "versions": ["0.0.6"]},
362
+ {"name": "@ensdomains/mock", "versions": ["2.1.52"]},
363
+ {"name": "@ensdomains/name-wrapper", "versions": ["1.0.1"]},
364
+ {"name": "@ensdomains/offchain-resolver-contracts", "versions": ["0.2.2"]},
365
+ {"name": "@ensdomains/op-resolver-contracts", "versions": ["0.0.2"]},
366
+ {"name": "@ensdomains/react-ens-address", "versions": ["0.0.32"]},
367
+ {"name": "@ensdomains/renewal", "versions": ["0.0.13"]},
368
+ {"name": "@ensdomains/renewal-widget", "versions": ["0.1.10"]},
369
+ {"name": "@ensdomains/reverse-records", "versions": ["1.0.1"]},
370
+ {"name": "@ensdomains/server-analytics", "versions": ["0.0.2"]},
371
+ {"name": "@ensdomains/solsha1", "versions": ["0.0.4"]},
372
+ {"name": "@ensdomains/subdomain-registrar", "versions": ["0.2.4"]},
373
+ {"name": "@ensdomains/test-utils", "versions": ["1.3.1"]},
374
+ {"name": "@ensdomains/thorin", "versions": ["0.6.51"]},
375
+ {"name": "@ensdomains/ui", "versions": ["3.4.6"]},
376
+ {"name": "@ensdomains/unicode-confusables", "versions": ["0.1.1"]},
377
+ {"name": "@ensdomains/unruggable-gateways", "versions": ["0.0.3"]},
378
+ {"name": "@ensdomains/vite-plugin-i18next-loader", "versions": ["4.0.4"]},
379
+ {"name": "@ensdomains/web3modal", "versions": ["1.10.2"]},
380
+ {"name": "@everreal/react-charts", "versions": ["2.0.1", "2.0.2"]},
381
+ {"name": "@everreal/validate-esmoduleinterop-imports", "versions": ["1.4.4", "1.4.5"]},
382
+ {"name": "@everreal/web-analytics", "versions": ["0.0.1", "0.0.2"]},
383
+ {"name": "@faq-component/core", "versions": ["0.0.4"]},
384
+ {"name": "@faq-component/react", "versions": ["1.0.1"]},
385
+ {"name": "@fishingbooker/browser-sync-plugin", "versions": ["1.0.5"]},
386
+ {"name": "@fishingbooker/react-loader", "versions": ["1.0.7"]},
387
+ {"name": "@fishingbooker/react-pagination", "versions": ["2.0.6"]},
388
+ {"name": "@fishingbooker/react-raty", "versions": ["2.0.1"]},
389
+ {"name": "@fishingbooker/react-swiper", "versions": ["0.1.5"]},
390
+ {"name": "@hapheus/n8n-nodes-pgp", "versions": ["1.5.1"]},
391
+ {"name": "@hover-design/core", "versions": ["0.0.1"]},
392
+ {"name": "@hover-design/react", "versions": ["0.2.1"]},
393
+ {"name": "@huntersofbook/auth-vue", "versions": ["0.4.2"]},
394
+ {"name": "@huntersofbook/core", "versions": ["0.5.1"]},
395
+ {"name": "@huntersofbook/core-nuxt", "versions": ["0.4.2"]},
396
+ {"name": "@huntersofbook/form-naiveui", "versions": ["0.5.1"]},
397
+ {"name": "@huntersofbook/i18n", "versions": ["0.8.2"]},
398
+ {"name": "@huntersofbook/ui", "versions": ["0.5.1"]},
399
+ {"name": "@hyperlook/telemetry-sdk", "versions": ["1.0.19"]},
400
+ {"name": "@ifelsedeveloper/protocol-contracts-svm-idl", "versions": ["0.1.2", "0.1.3"]},
401
+ {"name": "@ifings/design-system", "versions": ["4.9.2"]},
402
+ {"name": "@ifings/metatron3", "versions": ["0.1.5"]},
403
+ {"name": "@jayeshsadhwani/telemetry-sdk", "versions": ["1.0.14"]},
404
+ {"name": "@kvytech/cli", "versions": ["0.0.7"]},
405
+ {"name": "@kvytech/components", "versions": ["0.0.2"]},
406
+ {"name": "@kvytech/habbit-e2e-test", "versions": ["0.0.2"]},
407
+ {"name": "@kvytech/medusa-plugin-announcement", "versions": ["0.0.8"]},
408
+ {"name": "@kvytech/medusa-plugin-management", "versions": ["0.0.5"]},
409
+ {"name": "@kvytech/medusa-plugin-newsletter", "versions": ["0.0.5"]},
410
+ {"name": "@kvytech/medusa-plugin-product-reviews", "versions": ["0.0.9"]},
411
+ {"name": "@kvytech/medusa-plugin-promotion", "versions": ["0.0.2"]},
412
+ {"name": "@kvytech/web", "versions": ["0.0.2"]},
413
+ {"name": "@lessondesk/api-client", "versions": ["9.12.2", "9.12.3"]},
414
+ {"name": "@lessondesk/babel-preset", "versions": ["1.0.1"]},
415
+ {"name": "@lessondesk/electron-group-api-client", "versions": ["1.0.3"]},
416
+ {"name": "@lessondesk/eslint-config", "versions": ["1.4.2"]},
417
+ {"name": "@lessondesk/material-icons", "versions": ["1.0.3"]},
418
+ {"name": "@lessondesk/react-table-context", "versions": ["2.0.4"]},
419
+ {"name": "@lessondesk/schoolbus", "versions": ["5.2.2", "5.2.3"]},
420
+ {"name": "@livecms/live-edit", "versions": ["0.0.32"]},
421
+ {"name": "@livecms/nuxt-live-edit", "versions": ["1.9.2"]},
422
+ {"name": "@lokeswari-satyanarayanan/rn-zustand-expo-template", "versions": ["1.0.9"]},
423
+ {"name": "@louisle2/core", "versions": ["1.0.1"]},
424
+ {"name": "@louisle2/cortex-js", "versions": ["0.1.6"]},
425
+ {"name": "@lpdjs/firestore-repo-service", "versions": ["1.0.1"]},
426
+ {"name": "@lui-ui/lui-nuxt", "versions": ["0.1.1"]},
427
+ {"name": "@lui-ui/lui-tailwindcss", "versions": ["0.1.2"]},
428
+ {"name": "@lui-ui/lui-vue", "versions": ["1.0.13"]},
429
+ {"name": "@markvivanco/app-version-checker", "versions": ["1.0.1", "1.0.2"]},
430
+ {"name": "@mcp-use/cli", "versions": ["2.2.6", "2.2.7"]},
431
+ {"name": "@mcp-use/inspector", "versions": ["0.6.2", "0.6.3"]},
432
+ {"name": "@mcp-use/mcp-use", "versions": ["1.0.1", "1.0.2"]},
433
+ {"name": "@micado-digital/stadtmarketing-kufstein-external", "versions": ["1.9.1"]},
434
+ {"name": "@mizzle-dev/orm", "versions": ["0.0.2"]},
435
+ {"name": "@mparpaillon/connector-parse", "versions": ["1.0.1"]},
436
+ {"name": "@mparpaillon/imagesloaded", "versions": ["4.1.2"]},
437
+ {"name": "@mparpaillon/page", "versions": ["1.0.1"]},
438
+ {"name": "@ntnx/passport-wso2", "versions": ["0.0.3"]},
439
+ {"name": "@ntnx/t", "versions": ["0.0.101"]},
440
+ {"name": "@oku-ui/accordion", "versions": ["0.6.2"]},
441
+ {"name": "@oku-ui/alert-dialog", "versions": ["0.6.2"]},
442
+ {"name": "@oku-ui/arrow", "versions": ["0.6.2"]},
443
+ {"name": "@oku-ui/aspect-ratio", "versions": ["0.6.2"]},
444
+ {"name": "@oku-ui/avatar", "versions": ["0.6.2"]},
445
+ {"name": "@oku-ui/checkbox", "versions": ["0.6.3"]},
446
+ {"name": "@oku-ui/collapsible", "versions": ["0.6.2"]},
447
+ {"name": "@oku-ui/collection", "versions": ["0.6.2"]},
448
+ {"name": "@oku-ui/dialog", "versions": ["0.6.2"]},
449
+ {"name": "@oku-ui/direction", "versions": ["0.6.2"]},
450
+ {"name": "@oku-ui/dismissable-layer", "versions": ["0.6.2"]},
451
+ {"name": "@oku-ui/focus-guards", "versions": ["0.6.2"]},
452
+ {"name": "@oku-ui/focus-scope", "versions": ["0.6.2"]},
453
+ {"name": "@oku-ui/hover-card", "versions": ["0.6.2"]},
454
+ {"name": "@oku-ui/label", "versions": ["0.6.2"]},
455
+ {"name": "@oku-ui/menu", "versions": ["0.6.2"]},
456
+ {"name": "@oku-ui/motion", "versions": ["0.4.4"]},
457
+ {"name": "@oku-ui/motion-nuxt", "versions": ["0.2.2"]},
458
+ {"name": "@oku-ui/popover", "versions": ["0.6.2"]},
459
+ {"name": "@oku-ui/popper", "versions": ["0.6.2"]},
460
+ {"name": "@oku-ui/portal", "versions": ["0.6.2"]},
461
+ {"name": "@oku-ui/presence", "versions": ["0.6.2"]},
462
+ {"name": "@oku-ui/primitive", "versions": ["0.6.2"]},
463
+ {"name": "@oku-ui/primitives", "versions": ["0.7.9"]},
464
+ {"name": "@oku-ui/primitives-nuxt", "versions": ["0.3.1"]},
465
+ {"name": "@oku-ui/progress", "versions": ["0.6.2"]},
466
+ {"name": "@oku-ui/provide", "versions": ["0.6.2"]},
467
+ {"name": "@oku-ui/radio-group", "versions": ["0.6.2"]},
468
+ {"name": "@oku-ui/roving-focus", "versions": ["0.6.2"]},
469
+ {"name": "@oku-ui/scroll-area", "versions": ["0.6.2"]},
470
+ {"name": "@oku-ui/separator", "versions": ["0.6.2"]},
471
+ {"name": "@oku-ui/slider", "versions": ["0.6.2"]},
472
+ {"name": "@oku-ui/slot", "versions": ["0.6.2"]},
473
+ {"name": "@oku-ui/switch", "versions": ["0.6.2"]},
474
+ {"name": "@oku-ui/tabs", "versions": ["0.6.2"]},
475
+ {"name": "@oku-ui/toast", "versions": ["0.6.2"]},
476
+ {"name": "@oku-ui/toggle", "versions": ["0.6.2"]},
477
+ {"name": "@oku-ui/toggle-group", "versions": ["0.6.2"]},
478
+ {"name": "@oku-ui/toolbar", "versions": ["0.6.2"]},
479
+ {"name": "@oku-ui/tooltip", "versions": ["0.6.2"]},
480
+ {"name": "@oku-ui/use-composable", "versions": ["0.6.2"]},
481
+ {"name": "@oku-ui/utils", "versions": ["0.6.2"]},
482
+ {"name": "@oku-ui/visually-hidden", "versions": ["0.6.2"]},
483
+ {"name": "@orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode", "versions": ["2.0.5"]},
484
+ {"name": "@orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode", "versions": ["1.1.1"]},
485
+ {"name": "@orbitgtbelgium/orbit-components", "versions": ["1.2.9"]},
486
+ {"name": "@orbitgtbelgium/time-slider", "versions": ["1.0.187"]},
487
+ {"name": "@osmanekrem/bmad", "versions": ["1.0.6"]},
488
+ {"name": "@osmanekrem/error-handler", "versions": ["1.2.2"]},
489
+ {"name": "@pergel/cli", "versions": ["0.11.1"]},
490
+ {"name": "@pergel/module-box", "versions": ["0.6.1"]},
491
+ {"name": "@pergel/module-graphql", "versions": ["0.6.1"]},
492
+ {"name": "@pergel/module-ui", "versions": ["0.0.9"]},
493
+ {"name": "@pergel/nuxt", "versions": ["0.25.5"]},
494
+ {"name": "@posthog/agent", "versions": ["1.24.1"]},
495
+ {"name": "@posthog/ai", "versions": ["7.1.2"]},
496
+ {"name": "@posthog/automatic-cohorts-plugin", "versions": ["0.0.8"]},
497
+ {"name": "@posthog/bitbucket-release-tracker", "versions": ["0.0.8"]},
498
+ {"name": "@posthog/cli", "versions": ["0.5.15"]},
499
+ {"name": "@posthog/clickhouse", "versions": ["1.7.1"]},
500
+ {"name": "@posthog/core", "versions": ["1.5.6"]},
501
+ {"name": "@posthog/currency-normalization-plugin", "versions": ["0.0.8"]},
502
+ {"name": "@posthog/customerio-plugin", "versions": ["0.0.8"]},
503
+ {"name": "@posthog/databricks-plugin", "versions": ["0.0.8"]},
504
+ {"name": "@posthog/drop-events-on-property-plugin", "versions": ["0.0.8"]},
505
+ {"name": "@posthog/event-sequence-timer-plugin", "versions": ["0.0.8"]},
506
+ {"name": "@posthog/filter-out-plugin", "versions": ["0.0.8"]},
507
+ {"name": "@posthog/first-time-event-tracker", "versions": ["0.0.8"]},
508
+ {"name": "@posthog/geoip-plugin", "versions": ["0.0.8"]},
509
+ {"name": "@posthog/github-release-tracking-plugin", "versions": ["0.0.8"]},
510
+ {"name": "@posthog/gitub-star-sync-plugin", "versions": ["0.0.8"]},
511
+ {"name": "@posthog/heartbeat-plugin", "versions": ["0.0.8"]},
512
+ {"name": "@posthog/hedgehog-mode", "versions": ["0.0.42"]},
513
+ {"name": "@posthog/icons", "versions": ["0.36.1"]},
514
+ {"name": "@posthog/ingestion-alert-plugin", "versions": ["0.0.8"]},
515
+ {"name": "@posthog/intercom-plugin", "versions": ["0.0.8"]},
516
+ {"name": "@posthog/kinesis-plugin", "versions": ["0.0.8"]},
517
+ {"name": "@posthog/laudspeaker-plugin", "versions": ["0.0.8"]},
518
+ {"name": "@posthog/lemon-ui", "versions": ["0.0.1"]},
519
+ {"name": "@posthog/maxmind-plugin", "versions": ["0.1.6"]},
520
+ {"name": "@posthog/migrator3000-plugin", "versions": ["0.0.8"]},
521
+ {"name": "@posthog/netdata-event-processing", "versions": ["0.0.8"]},
522
+ {"name": "@posthog/nextjs", "versions": ["0.0.3"]},
523
+ {"name": "@posthog/nextjs-config", "versions": ["1.5.1"]},
524
+ {"name": "@posthog/nuxt", "versions": ["1.2.9"]},
525
+ {"name": "@posthog/pagerduty-plugin", "versions": ["0.0.8"]},
526
+ {"name": "@posthog/piscina", "versions": ["3.2.1"]},
527
+ {"name": "@posthog/plugin-contrib", "versions": ["0.0.6"]},
528
+ {"name": "@posthog/plugin-server", "versions": ["1.10.8"]},
529
+ {"name": "@posthog/plugin-unduplicates", "versions": ["0.0.8"]},
530
+ {"name": "@posthog/postgres-plugin", "versions": ["0.0.8"]},
531
+ {"name": "@posthog/react-rrweb-player", "versions": ["1.1.4"]},
532
+ {"name": "@posthog/rrdom", "versions": ["0.0.31"]},
533
+ {"name": "@posthog/rrweb", "versions": ["0.0.31"]},
534
+ {"name": "@posthog/rrweb-player", "versions": ["0.0.31"]},
535
+ {"name": "@posthog/rrweb-record", "versions": ["0.0.31"]},
536
+ {"name": "@posthog/rrweb-replay", "versions": ["0.0.19"]},
537
+ {"name": "@posthog/rrweb-snapshot", "versions": ["0.0.31"]},
538
+ {"name": "@posthog/rrweb-utils", "versions": ["0.0.31"]},
539
+ {"name": "@posthog/sendgrid-plugin", "versions": ["0.0.8"]},
540
+ {"name": "@posthog/siphash", "versions": ["1.1.2"]},
541
+ {"name": "@posthog/snowflake-export-plugin", "versions": ["0.0.8"]},
542
+ {"name": "@posthog/taxonomy-plugin", "versions": ["0.0.8"]},
543
+ {"name": "@posthog/twilio-plugin", "versions": ["0.0.8"]},
544
+ {"name": "@posthog/twitter-followers-plugin", "versions": ["0.0.8"]},
545
+ {"name": "@posthog/url-normalizer-plugin", "versions": ["0.0.8"]},
546
+ {"name": "@posthog/variance-plugin", "versions": ["0.0.8"]},
547
+ {"name": "@posthog/web-dev-server", "versions": ["1.0.5"]},
548
+ {"name": "@posthog/wizard", "versions": ["1.18.1"]},
549
+ {"name": "@posthog/zendesk-plugin", "versions": ["0.0.8"]},
550
+ {"name": "@postman/aether-icons", "versions": ["2.23.2", "2.23.3", "2.23.4"]},
551
+ {"name": "@postman/csv-parse", "versions": ["4.0.3", "4.0.4", "4.0.5"]},
552
+ {"name": "@postman/final-node-keytar", "versions": ["7.9.1", "7.9.2", "7.9.3"]},
553
+ {"name": "@postman/mcp-ui-client", "versions": ["5.5.1", "5.5.2", "5.5.3"]},
554
+ {"name": "@postman/node-keytar", "versions": ["7.9.4", "7.9.5", "7.9.6"]},
555
+ {"name": "@postman/pm-bin-linux-x64", "versions": ["1.24.3", "1.24.4", "1.24.5"]},
556
+ {"name": "@postman/pm-bin-macos-arm64", "versions": ["1.24.3", "1.24.4", "1.24.5"]},
557
+ {"name": "@postman/pm-bin-macos-x64", "versions": ["1.24.3", "1.24.4", "1.24.5"]},
558
+ {"name": "@postman/pm-bin-windows-x64", "versions": ["1.24.3", "1.24.4", "1.24.5"]},
559
+ {"name": "@postman/postman-collection-fork", "versions": ["4.3.3", "4.3.4", "4.3.5"]},
560
+ {"name": "@postman/postman-mcp-cli", "versions": ["1.0.3", "1.0.4", "1.0.5"]},
561
+ {"name": "@postman/postman-mcp-server", "versions": ["2.4.10", "2.4.11", "2.4.12"]},
562
+ {"name": "@postman/pretty-ms", "versions": ["6.1.1", "6.1.2", "6.1.3"]},
563
+ {"name": "@postman/secret-scanner-wasm", "versions": ["2.1.2", "2.1.3", "2.1.4"]},
564
+ {"name": "@postman/tunnel-agent", "versions": ["0.6.5", "0.6.6", "0.6.7"]},
565
+ {"name": "@postman/wdio-allure-reporter", "versions": ["0.0.7", "0.0.8", "0.0.9"]},
566
+ {"name": "@postman/wdio-junit-reporter", "versions": ["0.0.4", "0.0.5", "0.0.6"]},
567
+ {"name": "@pradhumngautam/common-app", "versions": ["1.0.2"]},
568
+ {"name": "@productdevbook/animejs-vue", "versions": ["0.2.1"]},
569
+ {"name": "@productdevbook/auth", "versions": ["0.2.2"]},
570
+ {"name": "@productdevbook/chatwoot", "versions": ["2.0.1"]},
571
+ {"name": "@productdevbook/motion", "versions": ["1.0.4"]},
572
+ {"name": "@productdevbook/ts-i18n", "versions": ["1.4.2"]},
573
+ {"name": "@pruthvi21/use-debounce", "versions": ["1.0.3"]},
574
+ {"name": "@quick-start-soft/quick-document-translator", "versions": ["1.4.2511142126"]},
575
+ {"name": "@quick-start-soft/quick-git-clean-markdown", "versions": ["1.4.2511142126"]},
576
+ {"name": "@quick-start-soft/quick-markdown", "versions": ["1.4.2511142126"]},
577
+ {"name": "@quick-start-soft/quick-markdown-compose", "versions": ["1.4.2506300029"]},
578
+ {"name": "@quick-start-soft/quick-markdown-image", "versions": ["1.4.2511142126"]},
579
+ {"name": "@quick-start-soft/quick-markdown-print", "versions": ["1.4.2511142126"]},
580
+ {"name": "@quick-start-soft/quick-markdown-translator", "versions": ["1.4.2509202331"]},
581
+ {"name": "@quick-start-soft/quick-remove-image-background", "versions": ["1.4.2511142126"]},
582
+ {"name": "@quick-start-soft/quick-task-refine", "versions": ["1.4.2511142126"]},
583
+ {"name": "@relyt/claude-context-core", "versions": ["0.1.1"]},
584
+ {"name": "@relyt/claude-context-mcp", "versions": ["0.1.1"]},
585
+ {"name": "@relyt/mcp-server-relytone", "versions": ["0.0.3"]},
586
+ {"name": "@sameepsi/sor", "versions": ["1.0.3"]},
587
+ {"name": "@sameepsi/sor2", "versions": ["2.0.2"]},
588
+ {"name": "@seezo/sdr-mcp-server", "versions": ["0.0.5"]},
589
+ {"name": "@seung-ju/next", "versions": ["0.0.2"]},
590
+ {"name": "@seung-ju/openapi-generator", "versions": ["0.0.4"]},
591
+ {"name": "@seung-ju/react-hooks", "versions": ["0.0.2"]},
592
+ {"name": "@seung-ju/react-native-action-sheet", "versions": ["0.2.1"]},
593
+ {"name": "@silgi/better-auth", "versions": ["0.8.1"]},
594
+ {"name": "@silgi/drizzle", "versions": ["0.8.4"]},
595
+ {"name": "@silgi/ecosystem", "versions": ["0.7.6"]},
596
+ {"name": "@silgi/graphql", "versions": ["0.7.15"]},
597
+ {"name": "@silgi/module-builder", "versions": ["0.8.8"]},
598
+ {"name": "@silgi/openapi", "versions": ["0.7.4"]},
599
+ {"name": "@silgi/permission", "versions": ["0.6.8"]},
600
+ {"name": "@silgi/ratelimit", "versions": ["0.2.1"]},
601
+ {"name": "@silgi/scalar", "versions": ["0.6.2"]},
602
+ {"name": "@silgi/yoga", "versions": ["0.7.1"]},
603
+ {"name": "@sme-ui/aoma-vevasound-metadata-lib", "versions": ["0.1.3"]},
604
+ {"name": "@strapbuild/react-native-date-time-picker", "versions": ["2.0.4"]},
605
+ {"name": "@strapbuild/react-native-perspective-image-cropper", "versions": ["0.4.15"]},
606
+ {"name": "@strapbuild/react-native-perspective-image-cropper-2", "versions": ["0.4.7"]},
607
+ {"name": "@strapbuild/react-native-perspective-image-cropper-poojan31", "versions": ["0.4.6"]},
608
+ {"name": "@suraj_h/medium-common", "versions": ["1.0.5"]},
609
+ {"name": "@thedelta/eslint-config", "versions": ["1.0.2"]},
610
+ {"name": "@tiaanduplessis/json", "versions": ["2.0.2", "2.0.3"]},
611
+ {"name": "@tiaanduplessis/react-progressbar", "versions": ["1.0.1", "1.0.2"]},
612
+ {"name": "@trackstar/angular-trackstar-link", "versions": ["1.0.2"]},
613
+ {"name": "@trackstar/react-trackstar-link", "versions": ["2.0.21"]},
614
+ {"name": "@trackstar/react-trackstar-link-upgrade", "versions": ["1.1.10"]},
615
+ {"name": "@trackstar/test-angular-package", "versions": ["0.0.9"]},
616
+ {"name": "@trackstar/test-package", "versions": ["1.1.5"]},
617
+ {"name": "@trefox/sleekshop-js", "versions": ["0.1.6"]},
618
+ {"name": "@trigo/atrix", "versions": ["7.0.1"]},
619
+ {"name": "@trigo/atrix-acl", "versions": ["4.0.2"]},
620
+ {"name": "@trigo/atrix-elasticsearch", "versions": ["2.0.1"]},
621
+ {"name": "@trigo/atrix-mongoose", "versions": ["1.0.2"]},
622
+ {"name": "@trigo/atrix-orientdb", "versions": ["1.0.2"]},
623
+ {"name": "@trigo/atrix-postgres", "versions": ["1.0.3"]},
624
+ {"name": "@trigo/atrix-pubsub", "versions": ["4.0.3"]},
625
+ {"name": "@trigo/atrix-redis", "versions": ["1.0.2"]},
626
+ {"name": "@trigo/atrix-soap", "versions": ["1.0.2"]},
627
+ {"name": "@trigo/atrix-swagger", "versions": ["3.0.1"]},
628
+ {"name": "@trigo/bool-expressions", "versions": ["4.1.3"]},
629
+ {"name": "@trigo/eslint-config-trigo", "versions": ["3.3.1"]},
630
+ {"name": "@trigo/fsm", "versions": ["3.4.2"]},
631
+ {"name": "@trigo/hapi-auth-signedlink", "versions": ["1.3.1"]},
632
+ {"name": "@trigo/jsdt", "versions": ["0.2.1"]},
633
+ {"name": "@trigo/keycloak-api", "versions": ["1.3.1"]},
634
+ {"name": "@trigo/node-soap", "versions": ["0.5.4"]},
635
+ {"name": "@trigo/pathfinder-ui-css", "versions": ["0.1.1"]},
636
+ {"name": "@trigo/trigo-hapijs", "versions": ["5.0.1"]},
637
+ {"name": "@trpc-rate-limiter/cloudflare", "versions": ["0.1.4"]},
638
+ {"name": "@trpc-rate-limiter/hono", "versions": ["0.1.4"]},
639
+ {"name": "@varsityvibe/api-client", "versions": ["1.3.36", "1.3.37"]},
640
+ {"name": "@varsityvibe/utils", "versions": ["5.0.6"]},
641
+ {"name": "@varsityvibe/validation-schemas", "versions": ["0.6.7", "0.6.8"]},
642
+ {"name": "@viapip/eslint-config", "versions": ["0.2.4"]},
643
+ {"name": "@vishadtyagi/full-year-calendar", "versions": ["0.1.11"]},
644
+ {"name": "@voiceflow/alexa-types", "versions": ["2.15.60", "2.15.61"]},
645
+ {"name": "@voiceflow/anthropic", "versions": ["0.4.4", "0.4.5"]},
646
+ {"name": "@voiceflow/api-sdk", "versions": ["3.28.58", "3.28.59"]},
647
+ {"name": "@voiceflow/backend-utils", "versions": ["5.0.1", "5.0.2"]},
648
+ {"name": "@voiceflow/base-types", "versions": ["2.136.2", "2.136.3"]},
649
+ {"name": "@voiceflow/body-parser", "versions": ["1.21.2", "1.21.3"]},
650
+ {"name": "@voiceflow/chat-types", "versions": ["2.14.58", "2.14.59"]},
651
+ {"name": "@voiceflow/circleci-config-sdk-orb-import", "versions": ["0.2.1", "0.2.2"]},
652
+ {"name": "@voiceflow/commitlint-config", "versions": ["2.6.1", "2.6.2"]},
653
+ {"name": "@voiceflow/common", "versions": ["8.9.1", "8.9.2"]},
654
+ {"name": "@voiceflow/default-prompt-wrappers", "versions": ["1.7.3", "1.7.4"]},
655
+ {"name": "@voiceflow/dependency-cruiser-config", "versions": ["1.8.11", "1.8.12"]},
656
+ {"name": "@voiceflow/dtos-interact", "versions": ["1.40.1", "1.40.2"]},
657
+ {"name": "@voiceflow/encryption", "versions": ["0.3.2", "0.3.3"]},
658
+ {"name": "@voiceflow/eslint-config", "versions": ["7.16.4", "7.16.5"]},
659
+ {"name": "@voiceflow/eslint-plugin", "versions": ["1.6.1", "1.6.2"]},
660
+ {"name": "@voiceflow/exception", "versions": ["1.10.1", "1.10.2"]},
661
+ {"name": "@voiceflow/fetch", "versions": ["1.11.1", "1.11.2"]},
662
+ {"name": "@voiceflow/general-types", "versions": ["3.2.22", "3.2.23"]},
663
+ {"name": "@voiceflow/git-branch-check", "versions": ["1.4.3", "1.4.4"]},
664
+ {"name": "@voiceflow/google-dfes-types", "versions": ["2.17.12", "2.17.13"]},
665
+ {"name": "@voiceflow/google-types", "versions": ["2.21.12", "2.21.13"]},
666
+ {"name": "@voiceflow/husky-config", "versions": ["1.3.1", "1.3.2"]},
667
+ {"name": "@voiceflow/logger", "versions": ["2.4.2", "2.4.3"]},
668
+ {"name": "@voiceflow/metrics", "versions": ["1.5.1", "1.5.2"]},
669
+ {"name": "@voiceflow/natural-language-commander", "versions": ["0.5.2", "0.5.3"]},
670
+ {"name": "@voiceflow/nestjs-common", "versions": ["2.75.2", "2.75.3"]},
671
+ {"name": "@voiceflow/nestjs-mongodb", "versions": ["1.3.1", "1.3.2"]},
672
+ {"name": "@voiceflow/nestjs-rate-limit", "versions": ["1.3.2", "1.3.3"]},
673
+ {"name": "@voiceflow/nestjs-redis", "versions": ["1.3.1", "1.3.2"]},
674
+ {"name": "@voiceflow/nestjs-timeout", "versions": ["1.3.1", "1.3.2"]},
675
+ {"name": "@voiceflow/npm-package-json-lint-config", "versions": ["1.1.1", "1.1.2"]},
676
+ {"name": "@voiceflow/openai", "versions": ["3.2.2", "3.2.3"]},
677
+ {"name": "@voiceflow/pino", "versions": ["6.11.3", "6.11.4"]},
678
+ {"name": "@voiceflow/pino-pretty", "versions": ["4.4.1", "4.4.2"]},
679
+ {"name": "@voiceflow/prettier-config", "versions": ["1.10.1", "1.10.2"]},
680
+ {"name": "@voiceflow/react-chat", "versions": ["1.65.3", "1.65.4"]},
681
+ {"name": "@voiceflow/runtime", "versions": ["1.29.1", "1.29.2"]},
682
+ {"name": "@voiceflow/runtime-client-js", "versions": ["1.17.2", "1.17.3"]},
683
+ {"name": "@voiceflow/sdk-runtime", "versions": ["1.43.1", "1.43.2"]},
684
+ {"name": "@voiceflow/secrets-provider", "versions": ["1.9.2", "1.9.3"]},
685
+ {"name": "@voiceflow/semantic-release-config", "versions": ["1.4.1", "1.4.2"]},
686
+ {"name": "@voiceflow/serverless-plugin-typescript", "versions": ["2.1.7", "2.1.8"]},
687
+ {"name": "@voiceflow/slate-serializer", "versions": ["1.7.3", "1.7.4"]},
688
+ {"name": "@voiceflow/stitches-react", "versions": ["2.3.2", "2.3.3"]},
689
+ {"name": "@voiceflow/storybook-config", "versions": ["1.2.2", "1.2.3"]},
690
+ {"name": "@voiceflow/stylelint-config", "versions": ["1.1.1", "1.1.2"]},
691
+ {"name": "@voiceflow/test-common", "versions": ["2.1.1", "2.1.2"]},
692
+ {"name": "@voiceflow/tsconfig", "versions": ["1.12.1", "1.12.2"]},
693
+ {"name": "@voiceflow/tsconfig-paths", "versions": ["1.1.4", "1.1.5"]},
694
+ {"name": "@voiceflow/utils-designer", "versions": ["1.74.19", "1.74.20"]},
695
+ {"name": "@voiceflow/verror", "versions": ["1.1.4", "1.1.5"]},
696
+ {"name": "@voiceflow/vite-config", "versions": ["2.6.2", "2.6.3"]},
697
+ {"name": "@voiceflow/vitest-config", "versions": ["1.10.2", "1.10.3"]},
698
+ {"name": "@voiceflow/voice-types", "versions": ["2.10.58", "2.10.59"]},
699
+ {"name": "@voiceflow/voiceflow-types", "versions": ["3.32.45", "3.32.46"]},
700
+ {"name": "@voiceflow/widget", "versions": ["1.7.18", "1.7.19"]},
701
+ {"name": "@vucod/email", "versions": ["0.0.3"]},
702
+ {"name": "@zapier/ai-actions", "versions": ["0.1.18", "0.1.19", "0.1.20"]},
703
+ {"name": "@zapier/ai-actions-react", "versions": ["0.1.12", "0.1.13", "0.1.14"]},
704
+ {"name": "@zapier/babel-preset-zapier", "versions": ["6.4.1", "6.4.2", "6.4.3"]},
705
+ {"name": "@zapier/browserslist-config-zapier", "versions": ["1.0.3", "1.0.4", "1.0.5"]},
706
+ {"name": "@zapier/eslint-plugin-zapier", "versions": ["11.0.3", "11.0.4", "11.0.5"]},
707
+ {"name": "@zapier/mcp-integration", "versions": ["3.0.1", "3.0.2", "3.0.3"]},
708
+ {"name": "@zapier/secret-scrubber", "versions": ["1.1.3", "1.1.4", "1.1.5"]},
709
+ {"name": "@zapier/spectral-api-ruleset", "versions": ["1.9.1", "1.9.2", "1.9.3"]},
710
+ {"name": "@zapier/stubtree", "versions": ["0.1.2", "0.1.3", "0.1.4"]},
711
+ {"name": "@zapier/zapier-sdk", "versions": ["0.15.5", "0.15.6", "0.15.7"]},
712
+ {"name": "ai-crowl-shield", "versions": ["1.0.7"]},
713
+ {"name": "arc-cli-fc", "versions": ["1.0.1"]},
714
+ {"name": "asciitranslator", "versions": ["1.0.3"]},
715
+ {"name": "asyncapi-preview", "versions": ["1.0.1", "1.0.2"]},
716
+ {"name": "atrix", "versions": ["1.0.1"]},
717
+ {"name": "atrix-mongoose", "versions": ["1.0.1"]},
718
+ {"name": "automation_model", "versions": ["1.0.491"]},
719
+ {"name": "avvvatars-vue", "versions": ["1.1.2"]},
720
+ {"name": "axios-builder", "versions": ["1.2.1"]},
721
+ {"name": "axios-cancelable", "versions": ["1.0.1", "1.0.2"]},
722
+ {"name": "axios-timed", "versions": ["1.0.1", "1.0.2"]},
723
+ {"name": "babel-preset-kinvey-flex-service", "versions": ["0.1.1"]},
724
+ {"name": "barebones-css", "versions": ["1.1.3", "1.1.4"]},
725
+ {"name": "benmostyn-frame-print", "versions": ["1.0.1"]},
726
+ {"name": "best_gpio_controller", "versions": ["1.0.10"]},
727
+ {"name": "better-auth-nuxt", "versions": ["0.0.10"]},
728
+ {"name": "better-queue-nedb", "versions": ["0.1.5"]},
729
+ {"name": "bidirectional-adapter", "versions": ["1.2.2", "1.2.3", "1.2.4", "1.2.5"]},
730
+ {"name": "blinqio-executions-cli", "versions": ["1.0.41"]},
731
+ {"name": "blob-to-base64", "versions": ["1.0.3"]},
732
+ {"name": "bool-expressions", "versions": ["0.1.2"]},
733
+ {"name": "buffered-interpolation-babylon6", "versions": ["0.2.8"]},
734
+ {"name": "bun-plugin-httpfile", "versions": ["0.1.1"]},
735
+ {"name": "bytecode-checker-cli", "versions": ["1.0.8", "1.0.9", "1.0.10", "1.0.11"]},
736
+ {"name": "bytes-to-x", "versions": ["1.0.1"]},
737
+ {"name": "calc-loan-interest", "versions": ["1.0.4"]},
738
+ {"name": "capacitor-plugin-apptrackingios", "versions": ["0.0.21"]},
739
+ {"name": "capacitor-plugin-purchase", "versions": ["0.1.1"]},
740
+ {"name": "capacitor-plugin-scgssigninwithgoogle", "versions": ["0.0.5"]},
741
+ {"name": "capacitor-purchase-history", "versions": ["0.0.10"]},
742
+ {"name": "capacitor-voice-recorder-wav", "versions": ["6.0.3"]},
743
+ {"name": "ceviz", "versions": ["0.0.5"]},
744
+ {"name": "chrome-extension-downloads", "versions": ["0.0.3", "0.0.4"]},
745
+ {"name": "claude-token-updater", "versions": ["1.0.3"]},
746
+ {"name": "coinmarketcap-api", "versions": ["3.1.2", "3.1.3"]},
747
+ {"name": "colors-regex", "versions": ["2.0.1"]},
748
+ {"name": "command-irail", "versions": ["0.5.4"]},
749
+ {"name": "compare-obj", "versions": ["1.1.1", "1.1.2"]},
750
+ {"name": "composite-reducer", "versions": ["1.0.2", "1.0.3", "1.0.4", "1.0.5"]},
751
+ {"name": "count-it-down", "versions": ["1.0.1", "1.0.2"]},
752
+ {"name": "cpu-instructions", "versions": ["0.0.14"]},
753
+ {"name": "create-director-app", "versions": ["0.1.1"]},
754
+ {"name": "create-glee-app", "versions": ["0.2.2", "0.2.3"]},
755
+ {"name": "create-hardhat3-app", "versions": ["1.1.1", "1.1.2", "1.1.3", "1.1.4"]},
756
+ {"name": "create-kinvey-flex-service", "versions": ["0.2.1"]},
757
+ {"name": "create-mcp-use-app", "versions": ["0.5.3", "0.5.4"]},
758
+ {"name": "create-silgi", "versions": ["0.3.1"]},
759
+ {"name": "crypto-addr-codec", "versions": ["0.1.9"]},
760
+ {"name": "css-dedoupe", "versions": ["0.1.2"]},
761
+ {"name": "csv-tool-cli", "versions": ["1.2.1"]},
762
+ {"name": "dashboard-empty-state", "versions": ["1.0.3"]},
763
+ {"name": "designstudiouiux", "versions": ["1.0.1"]},
764
+ {"name": "devstart-cli", "versions": ["1.0.6"]},
765
+ {"name": "dialogflow-es", "versions": ["1.1.1", "1.1.2", "1.1.3", "1.1.4"]},
766
+ {"name": "discord-bot-server", "versions": ["0.1.2"]},
767
+ {"name": "docusaurus-plugin-vanilla-extract", "versions": ["1.0.3"]},
768
+ {"name": "dont-go", "versions": ["1.1.2"]},
769
+ {"name": "dotnet-template", "versions": ["0.0.3", "0.0.4"]},
770
+ {"name": "drop-events-on-property-plugin", "versions": ["0.0.2"]},
771
+ {"name": "easypanel-sdk", "versions": ["0.3.2"]},
772
+ {"name": "electron-volt", "versions": ["0.0.2"]},
773
+ {"name": "email-deliverability-tester", "versions": ["1.1.1"]},
774
+ {"name": "enforce-branch-name", "versions": ["1.1.3"]},
775
+ {"name": "esbuild-plugin-brotli", "versions": ["0.2.1"]},
776
+ {"name": "esbuild-plugin-eta", "versions": ["0.1.1"]},
777
+ {"name": "esbuild-plugin-httpfile", "versions": ["0.4.1"]},
778
+ {"name": "eslint-config-kinvey-flex-service", "versions": ["0.1.1"]},
779
+ {"name": "eslint-config-nitpicky", "versions": ["4.0.1"]},
780
+ {"name": "eslint-config-trigo", "versions": ["22.0.2"]},
781
+ {"name": "eslint-config-zeallat-base", "versions": ["1.0.4"]},
782
+ {"name": "ethereum-ens", "versions": ["0.8.1"]},
783
+ {"name": "evm-checkcode-cli", "versions": ["1.0.12", "1.0.13", "1.0.14", "1.0.15"]},
784
+ {"name": "exact-ticker", "versions": ["0.3.5"]},
785
+ {"name": "expo-audio-session", "versions": ["0.2.1"]},
786
+ {"name": "expo-router-on-rails", "versions": ["0.0.4"]},
787
+ {"name": "express-starter-template", "versions": ["1.0.10"]},
788
+ {"name": "expressos", "versions": ["1.1.3"]},
789
+ {"name": "fat-fingered", "versions": ["1.0.1", "1.0.2"]},
790
+ {"name": "feature-flip", "versions": ["1.0.1", "1.0.2"]},
791
+ {"name": "firestore-search-engine", "versions": ["1.2.3"]},
792
+ {"name": "fittxt", "versions": ["1.0.2", "1.0.3"]},
793
+ {"name": "flapstacks", "versions": ["1.0.1", "1.0.2"]},
794
+ {"name": "flatten-unflatten", "versions": ["1.0.1", "1.0.2"]},
795
+ {"name": "formik-error-focus", "versions": ["2.0.1"]},
796
+ {"name": "formik-store", "versions": ["1.0.1"]},
797
+ {"name": "frontity-starter-theme", "versions": ["1.0.1"]},
798
+ {"name": "fuzzy-finder", "versions": ["1.0.5", "1.0.6"]},
799
+ {"name": "gate-evm-check-code2", "versions": ["2.0.3", "2.0.4", "2.0.5", "2.0.6"]},
800
+ {"name": "gate-evm-tools-test", "versions": ["1.0.5", "1.0.6", "1.0.7", "1.0.8"]},
801
+ {"name": "gatsby-plugin-antd", "versions": ["2.2.1"]},
802
+ {"name": "gatsby-plugin-cname", "versions": ["1.0.1", "1.0.2"]},
803
+ {"name": "generator-meteor-stock", "versions": ["0.1.6"]},
804
+ {"name": "generator-ng-itobuz", "versions": ["0.0.15"]},
805
+ {"name": "get-them-args", "versions": ["1.3.3"]},
806
+ {"name": "github-action-for-generator", "versions": ["2.1.27", "2.1.28"]},
807
+ {"name": "gitsafe", "versions": ["1.0.5"]},
808
+ {"name": "go-template", "versions": ["0.1.8", "0.1.9"]},
809
+ {"name": "gulp-inject-envs", "versions": ["1.2.1", "1.2.2"]},
810
+ {"name": "haufe-axera-api-client", "versions": ["0.0.1", "0.0.2"]},
811
+ {"name": "hope-mapboxdraw", "versions": ["0.1.1"]},
812
+ {"name": "hopedraw", "versions": ["1.0.3"]},
813
+ {"name": "hover-design-prototype", "versions": ["0.0.5"]},
814
+ {"name": "httpness", "versions": ["1.0.2", "1.0.3"]},
815
+ {"name": "hyper-fullfacing", "versions": ["1.0.3"]},
816
+ {"name": "hyperterm-hipster", "versions": ["1.0.7"]},
817
+ {"name": "ids-css", "versions": ["1.5.1"]},
818
+ {"name": "ids-enterprise-mcp-server", "versions": ["0.0.2"]},
819
+ {"name": "ids-enterprise-ng", "versions": ["20.1.6"]},
820
+ {"name": "ids-enterprise-typings", "versions": ["20.1.6"]},
821
+ {"name": "image-to-uri", "versions": ["1.0.1", "1.0.2"]},
822
+ {"name": "insomnia-plugin-random-pick", "versions": ["1.0.4"]},
823
+ {"name": "invo", "versions": ["0.2.2"]},
824
+ {"name": "iron-shield-miniapp", "versions": ["0.0.2"]},
825
+ {"name": "ito-button", "versions": ["8.0.3"]},
826
+ {"name": "itobuz-angular", "versions": ["0.0.1"]},
827
+ {"name": "itobuz-angular-auth", "versions": ["8.0.11"]},
828
+ {"name": "itobuz-angular-button", "versions": ["8.0.11"]},
829
+ {"name": "jacob-zuma", "versions": ["1.0.1", "1.0.2"]},
830
+ {"name": "jaetut-varit-test", "versions": ["1.0.2"]},
831
+ {"name": "jan-browser", "versions": ["0.13.1"]},
832
+ {"name": "jquery-bindings", "versions": ["1.1.2", "1.1.3"]},
833
+ {"name": "jsonsurge", "versions": ["1.0.7"]},
834
+ {"name": "just-toasty", "versions": ["1.7.1"]},
835
+ {"name": "kill-port", "versions": ["2.0.2", "2.0.3"]},
836
+ {"name": "kinetix-default-token-list", "versions": ["1.0.5"]},
837
+ {"name": "kinvey-cli-wrapper", "versions": ["0.3.1"]},
838
+ {"name": "kinvey-flex-scripts", "versions": ["0.5.1"]},
839
+ {"name": "kns-error-code", "versions": ["1.0.8"]},
840
+ {"name": "korea-administrative-area-geo-json-util", "versions": ["1.0.7"]},
841
+ {"name": "kwami", "versions": ["1.5.9", "1.5.10"]},
842
+ {"name": "lang-codes", "versions": ["1.0.1", "1.0.2"]},
843
+ {"name": "license-o-matic", "versions": ["1.2.1", "1.2.2"]},
844
+ {"name": "lint-staged-imagemin", "versions": ["1.3.1", "1.3.2"]},
845
+ {"name": "lite-serper-mcp-server", "versions": ["0.2.2"]},
846
+ {"name": "lui-vue-test", "versions": ["0.70.9"]},
847
+ {"name": "luno-api", "versions": ["1.2.3"]},
848
+ {"name": "m25-transaction-utils", "versions": ["1.1.16"]},
849
+ {"name": "manual-billing-system-miniapp-api", "versions": ["1.3.1"]},
850
+ {"name": "mcp-use", "versions": ["1.4.2", "1.4.3"]},
851
+ {"name": "medusa-plugin-announcement", "versions": ["0.0.3"]},
852
+ {"name": "medusa-plugin-logs", "versions": ["0.0.17"]},
853
+ {"name": "medusa-plugin-momo", "versions": ["0.0.68"]},
854
+ {"name": "medusa-plugin-product-reviews-kvy", "versions": ["0.0.4"]},
855
+ {"name": "medusa-plugin-zalopay", "versions": ["0.0.40"]},
856
+ {"name": "mod10-check-digit", "versions": ["1.0.1"]},
857
+ {"name": "mon-package-react-typescript", "versions": ["1.0.1"]},
858
+ {"name": "my-saeed-lib", "versions": ["0.1.1"]},
859
+ {"name": "n8n-nodes-tmdb", "versions": ["0.5.1"]},
860
+ {"name": "n8n-nodes-vercel-ai-sdk", "versions": ["0.1.7"]},
861
+ {"name": "n8n-nodes-viral-app", "versions": ["0.2.5"]},
862
+ {"name": "nanoreset", "versions": ["7.0.1", "7.0.2"]},
863
+ {"name": "next-circular-dependency", "versions": ["1.0.2", "1.0.3"]},
864
+ {"name": "next-simple-google-analytics", "versions": ["1.1.1", "1.1.2"]},
865
+ {"name": "next-styled-nprogress", "versions": ["1.0.4", "1.0.5"]},
866
+ {"name": "ngx-useful-swiper-prosenjit", "versions": ["9.0.2"]},
867
+ {"name": "ngx-wooapi", "versions": ["12.0.1"]},
868
+ {"name": "nitro-graphql", "versions": ["1.5.12"]},
869
+ {"name": "nitro-kutu", "versions": ["0.1.1"]},
870
+ {"name": "nitrodeploy", "versions": ["1.0.8"]},
871
+ {"name": "nitroping", "versions": ["0.1.1"]},
872
+ {"name": "normal-store", "versions": ["1.3.1", "1.3.2", "1.3.3", "1.3.4"]},
873
+ {"name": "nuxt-keycloak", "versions": ["0.2.2"]},
874
+ {"name": "obj-to-css", "versions": ["1.0.2", "1.0.3"]},
875
+ {"name": "okta-react-router-6", "versions": ["5.0.1"]},
876
+ {"name": "open2internet", "versions": ["0.1.1"]},
877
+ {"name": "orbit-boxicons", "versions": ["2.1.3"]},
878
+ {"name": "orbit-nebula-draw-tools", "versions": ["1.0.10"]},
879
+ {"name": "orbit-nebula-editor", "versions": ["1.0.2"]},
880
+ {"name": "orbit-soap", "versions": ["0.43.13"]},
881
+ {"name": "orchestrix", "versions": ["12.1.2"]},
882
+ {"name": "package-tester", "versions": ["1.0.1"]},
883
+ {"name": "parcel-plugin-asset-copier", "versions": ["1.1.2", "1.1.3"]},
884
+ {"name": "pdf-annotation", "versions": ["0.0.2"]},
885
+ {"name": "pergel", "versions": ["0.13.2"]},
886
+ {"name": "pergeltest", "versions": ["0.0.25"]},
887
+ {"name": "piclite", "versions": ["1.0.1"]},
888
+ {"name": "pico-uid", "versions": ["1.0.3", "1.0.4"]},
889
+ {"name": "pkg-readme", "versions": ["1.1.1"]},
890
+ {"name": "poper-react-sdk", "versions": ["0.1.2"]},
891
+ {"name": "posthog-docusaurus", "versions": ["2.0.6"]},
892
+ {"name": "posthog-js", "versions": ["1.297.3"]},
893
+ {"name": "posthog-node", "versions": ["4.18.1", "5.11.3", "5.13.3"]},
894
+ {"name": "posthog-plugin-hello-world", "versions": ["1.0.1"]},
895
+ {"name": "posthog-react-native", "versions": ["4.11.1", "4.12.5"]},
896
+ {"name": "posthog-react-native-session-replay", "versions": ["1.2.2"]},
897
+ {"name": "prime-one-table", "versions": ["0.0.19"]},
898
+ {"name": "prompt-eng", "versions": ["1.0.50"]},
899
+ {"name": "prompt-eng-server", "versions": ["1.0.18"]},
900
+ {"name": "puny-req", "versions": ["1.0.3"]},
901
+ {"name": "quickswap-ads-list", "versions": ["1.0.33"]},
902
+ {"name": "quickswap-default-staking-list", "versions": ["1.0.11"]},
903
+ {"name": "quickswap-default-staking-list-address", "versions": ["1.0.55"]},
904
+ {"name": "quickswap-default-token-list", "versions": ["1.5.16"]},
905
+ {"name": "quickswap-router-sdk", "versions": ["1.0.1"]},
906
+ {"name": "quickswap-sdk", "versions": ["3.0.44"]},
907
+ {"name": "quickswap-smart-order-router", "versions": ["1.0.1"]},
908
+ {"name": "quickswap-token-lists", "versions": ["1.0.3"]},
909
+ {"name": "quickswap-v2-sdk", "versions": ["2.0.1"]},
910
+ {"name": "ra-auth-firebase", "versions": ["1.0.3"]},
911
+ {"name": "ra-data-firebase", "versions": ["1.0.7", "1.0.8"]},
912
+ {"name": "react-component-taggers", "versions": ["0.1.9"]},
913
+ {"name": "react-data-to-export", "versions": ["1.0.1"]},
914
+ {"name": "react-element-prompt-inspector", "versions": ["0.1.18"]},
915
+ {"name": "react-favic", "versions": ["1.0.2"]},
916
+ {"name": "react-hook-form-persist", "versions": ["3.0.1", "3.0.2"]},
917
+ {"name": "react-jam-icons", "versions": ["1.0.1", "1.0.2"]},
918
+ {"name": "react-keycloak-context", "versions": ["1.0.8", "1.0.9"]},
919
+ {"name": "react-library-setup", "versions": ["0.0.6"]},
920
+ {"name": "react-linear-loader", "versions": ["1.0.2"]},
921
+ {"name": "react-micromodal.js", "versions": ["1.0.1", "1.0.2"]},
922
+ {"name": "react-native-datepicker-modal", "versions": ["1.3.1", "1.3.2"]},
923
+ {"name": "react-native-email", "versions": ["2.1.1", "2.1.2"]},
924
+ {"name": "react-native-fetch", "versions": ["2.0.1", "2.0.2"]},
925
+ {"name": "react-native-get-pixel-dimensions", "versions": ["1.0.1", "1.0.2"]},
926
+ {"name": "react-native-google-maps-directions", "versions": ["2.1.2"]},
927
+ {"name": "react-native-jam-icons", "versions": ["1.0.1", "1.0.2"]},
928
+ {"name": "react-native-log-level", "versions": ["1.2.1", "1.2.2"]},
929
+ {"name": "react-native-modest-checkbox", "versions": ["3.3.1"]},
930
+ {"name": "react-native-modest-storage", "versions": ["2.1.1"]},
931
+ {"name": "react-native-phone-call", "versions": ["1.2.1", "1.2.2"]},
932
+ {"name": "react-native-retriable-fetch", "versions": ["2.0.1", "2.0.2"]},
933
+ {"name": "react-native-use-modal", "versions": ["1.0.3"]},
934
+ {"name": "react-native-view-finder", "versions": ["1.2.1", "1.2.2"]},
935
+ {"name": "react-native-websocket", "versions": ["1.0.3", "1.0.4"]},
936
+ {"name": "react-native-worklet-functions", "versions": ["3.3.3"]},
937
+ {"name": "react-packery-component", "versions": ["1.0.3"]},
938
+ {"name": "react-qr-image", "versions": ["1.1.1"]},
939
+ {"name": "react-scrambled-text", "versions": ["1.0.4"]},
940
+ {"name": "rediff", "versions": ["1.0.5"]},
941
+ {"name": "rediff-viewer", "versions": ["0.0.7"]},
942
+ {"name": "redux-forge", "versions": ["2.5.3"]},
943
+ {"name": "redux-router-kit", "versions": ["1.2.2", "1.2.3", "1.2.4"]},
944
+ {"name": "revenuecat", "versions": ["1.0.1"]},
945
+ {"name": "rollup-plugin-httpfile", "versions": ["0.2.1"]},
946
+ {"name": "sa-company-registration-number-regex", "versions": ["1.0.1", "1.0.2"]},
947
+ {"name": "sa-id-gen", "versions": ["1.0.4", "1.0.5"]},
948
+ {"name": "samesame", "versions": ["1.0.3"]},
949
+ {"name": "scgs-capacitor-subscribe", "versions": ["1.0.11"]},
950
+ {"name": "scgsffcreator", "versions": ["1.0.5"]},
951
+ {"name": "schob", "versions": ["1.0.3"]},
952
+ {"name": "selenium-session", "versions": ["1.0.5"]},
953
+ {"name": "selenium-session-client", "versions": ["1.0.4"]},
954
+ {"name": "set-nested-prop", "versions": ["2.0.1", "2.0.2"]},
955
+ {"name": "shelf-jwt-sessions", "versions": ["0.1.2"]},
956
+ {"name": "shell-exec", "versions": ["1.1.3", "1.1.4"]},
957
+ {"name": "shinhan-limit-scrap", "versions": ["1.0.3"]},
958
+ {"name": "silgi", "versions": ["0.43.30"]},
959
+ {"name": "simplejsonform", "versions": ["1.0.1"]},
960
+ {"name": "skills-use", "versions": ["0.1.1", "0.1.2"]},
961
+ {"name": "solomon-api-stories", "versions": ["1.0.2"]},
962
+ {"name": "solomon-v3-stories", "versions": ["1.15.6"]},
963
+ {"name": "solomon-v3-ui-wrapper", "versions": ["1.6.1"]},
964
+ {"name": "soneium-acs", "versions": ["1.0.1"]},
965
+ {"name": "sort-by-distance", "versions": ["2.0.1"]},
966
+ {"name": "south-african-id-info", "versions": ["1.0.2"]},
967
+ {"name": "stat-fns", "versions": ["1.0.1"]},
968
+ {"name": "stoor", "versions": ["2.3.2"]},
969
+ {"name": "sufetch", "versions": ["0.4.1"]},
970
+ {"name": "super-commit", "versions": ["1.0.1"]},
971
+ {"name": "svelte-autocomplete-select", "versions": ["1.1.1"]},
972
+ {"name": "svelte-toasty", "versions": ["1.1.2", "1.1.3"]},
973
+ {"name": "tanstack-shadcn-table", "versions": ["1.1.5"]},
974
+ {"name": "tavily-module", "versions": ["1.0.1"]},
975
+ {"name": "tcsp", "versions": ["2.0.2"]},
976
+ {"name": "tcsp-draw-test", "versions": ["1.0.5"]},
977
+ {"name": "tcsp-test-vd", "versions": ["2.4.4"]},
978
+ {"name": "template-lib", "versions": ["1.1.3", "1.1.4"]},
979
+ {"name": "template-micro-service", "versions": ["1.0.2", "1.0.3"]},
980
+ {"name": "tenacious-fetch", "versions": ["2.3.2", "2.3.3"]},
981
+ {"name": "test-foundry-app", "versions": ["1.0.1", "1.0.2", "1.0.3", "1.0.4"]},
982
+ {"name": "test-hardhat-app", "versions": ["1.0.1", "1.0.2", "1.0.3", "1.0.4"]},
983
+ {"name": "test23112222-api", "versions": ["1.0.1"]},
984
+ {"name": "tiaan", "versions": ["1.0.2"]},
985
+ {"name": "tiptap-shadcn-vue", "versions": ["0.2.1"]},
986
+ {"name": "token.js-fork", "versions": ["0.7.32"]},
987
+ {"name": "toonfetch", "versions": ["0.3.2"]},
988
+ {"name": "trigo-react-app", "versions": ["4.1.2"]},
989
+ {"name": "ts-relay-cursor-paging", "versions": ["2.1.1"]},
990
+ {"name": "typeface-antonio-complete", "versions": ["1.0.5"]},
991
+ {"name": "typefence", "versions": ["1.2.2", "1.2.3"]},
992
+ {"name": "typeorm-orbit", "versions": ["0.2.27"]},
993
+ {"name": "unadapter", "versions": ["0.1.3"]},
994
+ {"name": "undefsafe-typed", "versions": ["1.0.3", "1.0.4"]},
995
+ {"name": "unemail", "versions": ["0.3.1"]},
996
+ {"name": "uniswap-router-sdk", "versions": ["1.6.2"]},
997
+ {"name": "uniswap-smart-order-router", "versions": ["3.16.26"]},
998
+ {"name": "uniswap-test-sdk-core", "versions": ["4.0.8"]},
999
+ {"name": "unsearch", "versions": ["0.0.3"]},
1000
+ {"name": "uplandui", "versions": ["0.5.4"]},
1001
+ {"name": "upload-to-play-store", "versions": ["1.0.1", "1.0.2"]},
1002
+ {"name": "url-encode-decode", "versions": ["1.0.1", "1.0.2"]},
1003
+ {"name": "use-unsaved-changes", "versions": ["1.0.9"]},
1004
+ {"name": "v-plausible", "versions": ["1.2.1"]},
1005
+ {"name": "valid-south-african-id", "versions": ["1.0.3"]},
1006
+ {"name": "valuedex-sdk", "versions": ["3.0.5"]},
1007
+ {"name": "vf-oss-template", "versions": ["1.0.1", "1.0.2", "1.0.3", "1.0.4"]},
1008
+ {"name": "victoria-wallet-constants", "versions": ["0.1.1", "0.1.2"]},
1009
+ {"name": "victoria-wallet-core", "versions": ["0.1.1", "0.1.2"]},
1010
+ {"name": "victoria-wallet-type", "versions": ["0.1.1", "0.1.2"]},
1011
+ {"name": "victoria-wallet-utils", "versions": ["0.1.1", "0.1.2"]},
1012
+ {"name": "victoria-wallet-validator", "versions": ["0.1.1", "0.1.2"]},
1013
+ {"name": "victoriaxoaquyet-wallet-core", "versions": ["0.2.1", "0.2.2"]},
1014
+ {"name": "vite-plugin-httpfile", "versions": ["0.2.1"]},
1015
+ {"name": "vue-browserupdate-nuxt", "versions": ["1.0.5"]},
1016
+ {"name": "wallet-evm", "versions": ["0.3.1", "0.3.2"]},
1017
+ {"name": "wallet-type", "versions": ["0.1.1", "0.1.2"]},
1018
+ {"name": "web-scraper-mcp", "versions": ["1.1.4"]},
1019
+ {"name": "web-types-htmx", "versions": ["0.1.1"]},
1020
+ {"name": "web-types-lit", "versions": ["0.1.1"]},
1021
+ {"name": "webpack-loader-httpfile", "versions": ["0.2.1"]},
1022
+ {"name": "wellness-expert-ng-gallery", "versions": ["5.1.1"]},
1023
+ {"name": "wenk", "versions": ["1.0.9", "1.0.10"]},
1024
+ {"name": "zapier-async-storage", "versions": ["1.0.1", "1.0.2", "1.0.3"]},
1025
+ {"name": "zapier-platform-cli", "versions": ["18.0.2", "18.0.3", "18.0.4"]},
1026
+ {"name": "zapier-platform-core", "versions": ["18.0.2", "18.0.3", "18.0.4"]},
1027
+ {"name": "zapier-platform-legacy-scripting-runner", "versions": ["4.0.2", "4.0.3", "4.0.4"]},
1028
+ {"name": "zapier-platform-schema", "versions": ["18.0.2", "18.0.3", "18.0.4"]},
1029
+ {"name": "zapier-scripts", "versions": ["7.8.3", "7.8.4"]},
1030
+ {"name": "zuper-cli", "versions": ["1.0.1"]},
1031
+ {"name": "zuper-sdk", "versions": ["1.0.57"]},
1032
+ {"name": "zuper-stream", "versions": ["2.0.9"]}
1033
+ ]
1034
+ },
1035
+ {
1036
+ "id": "postmark-mcp",
1037
+ "campaign": "postmark-mcp backdoor",
1038
+ "description": "An MCP server impersonating Postmark's that, from 1.0.16, BCC'd every email it sent to phan@giftshop.club. Koi gives the range as 1.0.16 and later; npm metadata shows 1.0.16 to 1.0.18 were published 2025-09-17 and all unpublished 2025-09-25. Snyk analysed 1.0.18.",
1039
+ "source": "https://web.archive.org/web/20250929094654/https://www.koi.security/blog/postmark-mcp-npm-malicious-backdoor-email-theft",
1040
+ "date": "2025-09-25",
1041
+ "confidence": "confirmed",
1042
+ "references": ["ohm2020backstabber", "ladisa2023sok"],
1043
+ "packages": [
1044
+ {"name": "postmark-mcp", "versions": ["1.0.16", "1.0.17", "1.0.18"]}
1045
+ ]
1046
+ }
1047
+ ]
1048
+ }