supply-chain-guard 5.26.1 → 5.26.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (14) hide show
  1. package/README.md +1 -1
  2. package/action.yml +1 -1
  3. package/dist/cli.js +1 -1
  4. package/dist/dependency-confusion.js +1 -1
  5. package/dist/npm-scanner.js +1 -1
  6. package/dist/pypi-scanner.js +1 -1
  7. package/dist/reporter.js +5 -5
  8. package/dist/sbom-generator.js +1 -1
  9. package/dist/scanner.js +1 -1
  10. package/dist/threat-intel.d.ts.map +1 -1
  11. package/dist/threat-intel.js +170 -0
  12. package/dist/threat-intel.js.map +1 -1
  13. package/dist/vscode-scanner.js +1 -1
  14. package/package.json +1 -1
package/README.md CHANGED
@@ -131,7 +131,7 @@ Run the scanner as a [pre-commit](https://pre-commit.com) hook (Python-ecosystem
131
131
  ```yaml
132
132
  repos:
133
133
  - repo: https://github.com/homeofe/supply-chain-guard
134
- rev: v5.26.1
134
+ rev: v5.26.2
135
135
  hooks:
136
136
  - id: supply-chain-guard
137
137
  ```
package/action.yml CHANGED
@@ -66,7 +66,7 @@ runs:
66
66
 
67
67
  - name: Install supply-chain-guard
68
68
  shell: bash
69
- run: npm install -g supply-chain-guard@5.26.1 --ignore-scripts --no-audit --no-fund
69
+ run: npm install -g supply-chain-guard@5.26.2 --ignore-scripts --no-audit --no-fund
70
70
 
71
71
  - name: Run scan
72
72
  id: scan
package/dist/cli.js CHANGED
@@ -187,7 +187,7 @@ function assertDistinctOutputPaths(options) {
187
187
  program
188
188
  .name("supply-chain-guard")
189
189
  .description("Open-source supply-chain security scanner. Detects GlassWorm and similar malware campaigns in npm packages, PyPI packages, code repos, VS Code extensions, and project dependencies.")
190
- .version("5.26.1");
190
+ .version("5.26.2");
191
191
  // ── scan command ────────────────────────────────────────────────────
192
192
  program
193
193
  .command("scan")
package/dist/dependency-confusion.js CHANGED
@@ -49,7 +49,7 @@ const path = __importStar(require("node:path"));
49
49
  const https = __importStar(require("node:https"));
50
50
  const types_js_1 = require("./types.js");
51
51
  const pattern_scanner_js_1 = require("./pattern-scanner.js");
52
- const TOOL_VERSION = "5.26.1";
52
+ const TOOL_VERSION = "5.26.2";
53
53
  const NPM_REGISTRY = "https://registry.npmjs.org";
54
54
  const NPM_DOWNLOADS_API = "https://api.npmjs.org/downloads/point/last-week";
55
55
  const PYPI_REGISTRY = "https://pypi.org/pypi";
package/dist/npm-scanner.js CHANGED
@@ -61,7 +61,7 @@ const extracted_file_walker_js_1 = require("./extracted-file-walker.js");
61
61
  const threat_intel_js_1 = require("./threat-intel.js");
62
62
  const install_guard_js_1 = require("./install-guard.js");
63
63
  const remote_download_js_1 = require("./remote-download.js");
64
- const TOOL_VERSION = "5.26.1";
64
+ const TOOL_VERSION = "5.26.2";
65
65
  const NPM_REGISTRY = "https://registry.npmjs.org";
66
66
  const NPM_REGISTRY_HOST = "registry.npmjs.org";
67
67
  const RAW_GITHUB_HOST = "raw.githubusercontent.com";
package/dist/pypi-scanner.js CHANGED
@@ -56,7 +56,7 @@ const patterns_js_1 = require("./patterns.js");
56
56
  const pattern_scanner_js_1 = require("./pattern-scanner.js");
57
57
  const extracted_file_walker_js_1 = require("./extracted-file-walker.js");
58
58
  const remote_download_js_1 = require("./remote-download.js");
59
- const TOOL_VERSION = "5.26.1";
59
+ const TOOL_VERSION = "5.26.2";
60
60
  const PYPI_API = "https://pypi.org/pypi";
61
61
  const PYPI_METADATA_HOST = "pypi.org";
62
62
  const PYPI_ARTIFACT_HOST = "files.pythonhosted.org";
package/dist/reporter.js CHANGED
@@ -111,7 +111,7 @@ function formatJson(report) {
111
111
  function formatText(report) {
112
112
  const lines = [];
113
113
  // ── layout constants ───────────────────────────────────────────────────────
114
- const VERSION = "5.26.1";
114
+ const VERSION = "5.26.2";
115
115
  const W = 76; // visible chars between "│ " and " │" (total line = 80)
116
116
  // ── ANSI helpers ───────────────────────────────────────────────────────────
117
117
  const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, "");
@@ -564,7 +564,7 @@ function formatSarif(report) {
564
564
  tool: {
565
565
  driver: {
566
566
  name: "supply-chain-guard",
567
- version: "5.26.1",
567
+ version: "5.26.2",
568
568
  informationUri: "https://github.com/homeofe/supply-chain-guard",
569
569
  rules,
570
570
  },
@@ -654,7 +654,7 @@ function formatSbom(report) {
654
654
  timestamp: report.timestamp,
655
655
  tools: {
656
656
  components: [
657
- { type: "application", name: "supply-chain-guard", version: "5.26.1" },
657
+ { type: "application", name: "supply-chain-guard", version: "5.26.2" },
658
658
  ],
659
659
  },
660
660
  component: {
@@ -777,7 +777,7 @@ function formatGitlab(report) {
777
777
  name: "supply-chain-guard",
778
778
  url: "https://github.com/homeofe/supply-chain-guard",
779
779
  vendor: { name: "supply-chain-guard" },
780
- version: "5.26.1",
780
+ version: "5.26.2",
781
781
  };
782
782
  const vulnerabilities = report.findings
783
783
  .filter((f) => !f.suppressed)
@@ -1019,7 +1019,7 @@ footer{text-align:center;padding:24px;color:#94a3b8;font-size:13px}
1019
1019
  ` : ""}
1020
1020
 
1021
1021
  <footer>
1022
- Generated by <a href="https://github.com/homeofe/supply-chain-guard">supply-chain-guard</a> v5.26.1
1022
+ Generated by <a href="https://github.com/homeofe/supply-chain-guard">supply-chain-guard</a> v5.26.2
1023
1023
  </footer>
1024
1024
  </div>
1025
1025
  <script>
package/dist/sbom-generator.js CHANGED
@@ -45,7 +45,7 @@ exports.generateSbomDocument = generateSbomDocument;
45
45
  const fs = __importStar(require("node:fs"));
46
46
  const path = __importStar(require("node:path"));
47
47
  const node_crypto_1 = require("node:crypto");
48
- const TOOL_VERSION = "5.26.1";
48
+ const TOOL_VERSION = "5.26.2";
49
49
  /**
50
50
  * Build a Package URL (purl) for an npm package.
51
51
  */
package/dist/scanner.js CHANGED
@@ -95,7 +95,7 @@ const slsa_verifier_js_1 = require("./slsa-verifier.js");
95
95
  const dependency_confusion_js_1 = require("./dependency-confusion.js");
96
96
  const mcp_scanner_js_1 = require("./mcp-scanner.js");
97
97
  const skills_scanner_js_1 = require("./skills-scanner.js");
98
- const TOOL_VERSION = "5.26.1";
98
+ const TOOL_VERSION = "5.26.2";
99
99
  /**
100
100
  * Exact files that contain this package's own inert detector definitions or
101
101
  * regression fixtures.
package/dist/threat-intel.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"threat-intel.d.ts","sourceRoot":"","sources":["../src/threat-intel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,YAAY,CAAC;AAM7D,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AA8uXF,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAGlD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,OAAO,EAAE,CAE1C;AAaD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,EAAE,CA+CX;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB3C;AAkBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAwBhF;AAsID;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAgDpE;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAa7D;AASD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EAAE,GACd,OAAO,EAAE,CAiEX;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,OAAO,EAAE,GACf,OAAO,GAAG,IAAI,CAwBhB"}
1
+ {"version":3,"file":"threat-intel.d.ts","sourceRoot":"","sources":["../src/threat-intel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,YAAY,CAAC;AAM7D,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAy5XF,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAGlD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,OAAO,EAAE,CAE1C;AAaD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,EAAE,CA+CX;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB3C;AAkBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAwBhF;AAsID;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAgDpE;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAa7D;AASD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,OAAO,EAAE,GACd,OAAO,EAAE,CAiEX;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,OAAO,EAAE,GACf,OAAO,GAAG,IAAI,CAwBhB"}
package/dist/threat-intel.js CHANGED
@@ -11914,6 +11914,176 @@ const FEED_CHUNK_11 = [
11914
11914
  { type: "package", value: "pypi:ufish@0.1.3", severity: "critical", confidence: 1.0, family: "MiniShaiHulud", campaign: "Miasma Hades PyPI", source: "Socket, StepSecurity, Orca", firstSeen: "2026-08-13" },
11915
11915
  { type: "package", value: "pypi:uprobe@0.1.3", severity: "critical", confidence: 1.0, family: "MiniShaiHulud", campaign: "Miasma Hades PyPI", source: "Socket, StepSecurity, Orca", firstSeen: "2026-08-13" },
11916
11916
  { type: "package", value: "pypi:uprobe@0.1.4", severity: "critical", confidence: 1.0, family: "MiniShaiHulud", campaign: "Miasma Hades PyPI", source: "Socket, StepSecurity, Orca", firstSeen: "2026-08-13" },
11917
+ // Imported from GitHub Advisory Database (2026-07-31) - see docs/threat-feed-sources.md
11918
+ { type: "package", value: "fr-ito-web-react@99.99.99", severity: "critical", confidence: 1.0, source: "GHSA-rqvx-rm83-r9wh, MAL-2026-14019", firstSeen: "2026-08-14" },
11919
+ { type: "package", value: "bs58-33@6.0.1", severity: "critical", confidence: 1.0, source: "GHSA-f8f3-v53p-w68x, MAL-2026-14017", firstSeen: "2026-08-14" },
11920
+ { type: "package", value: "bs58-77@6.0.1", severity: "critical", confidence: 1.0, source: "GHSA-qm5j-29vw-2w4v, MAL-2026-14018", firstSeen: "2026-08-14" },
11921
+ { type: "package", value: "webautomation_js@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-v4hj-5v4c-hpx9, MAL-2026-13991", firstSeen: "2026-08-14" },
11922
+ { type: "package", value: "webautomation_js@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-v4hj-5v4c-hpx9, MAL-2026-13991", firstSeen: "2026-08-14" },
11923
+ { type: "package", value: "wct-st@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-6r3v-5c9p-jv7v, MAL-2026-13990", firstSeen: "2026-08-14" },
11924
+ { type: "package", value: "preinstall-hook-webhook-callback-demo@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-9j5p-xwfm-m987, MAL-2026-14016", firstSeen: "2026-08-14" },
11925
+ { type: "package", value: "preinstall-hook-webhook-callback-demo@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-9j5p-xwfm-m987, MAL-2026-14016", firstSeen: "2026-08-14" },
11926
+ { type: "package", value: "@secauditb20y/sec-test-r3b@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-whmg-4w65-37cm, MAL-2026-13989", firstSeen: "2026-08-14" },
11927
+ { type: "package", value: "notafollower@1.0.3", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11928
+ { type: "package", value: "notafollower@1.0.11", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11929
+ { type: "package", value: "notafollower@1.0.8", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11930
+ { type: "package", value: "notafollower@1.0.9", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11931
+ { type: "package", value: "notafollower@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11932
+ { type: "package", value: "notafollower@1.0.2", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11933
+ { type: "package", value: "notafollower@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11934
+ { type: "package", value: "notafollower@1.0.5", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11935
+ { type: "package", value: "notafollower@1.0.4", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11936
+ { type: "package", value: "notafollower@1.0.10", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11937
+ { type: "package", value: "notafollower@1.0.6", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11938
+ { type: "package", value: "notafollower@1.0.7", severity: "critical", confidence: 1.0, source: "GHSA-8mmx-gvp3-q5f5, MAL-2026-13986", firstSeen: "2026-08-13" },
11939
+ { type: "package", value: "bs58-15@6.0.1", severity: "critical", confidence: 1.0, source: "GHSA-pc6p-3869-9j4f, MAL-2026-13964", firstSeen: "2026-08-13" },
11940
+ { type: "package", value: "napi-raw@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-r9mm-m965-266j, MAL-2026-13984", firstSeen: "2026-08-13" },
11941
+ { type: "package", value: "tizen-webdriver-cli@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-cffv-ggq7-fw2q, MAL-2026-13966", firstSeen: "2026-08-13" },
11942
+ { type: "package", value: "nc-verify-127942@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-phh7-pw76-hr8h, MAL-2026-13965", firstSeen: "2026-08-13" },
11943
+ { type: "package", value: "resolve-audit@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-m9fv-2g5q-rhhh, MAL-2026-13987", firstSeen: "2026-08-13" },
11944
+ { type: "package", value: "xrblocks-mcp@6.3.1", severity: "critical", confidence: 1.0, source: "GHSA-pwwg-f86j-hmv7, MAL-2026-13988", firstSeen: "2026-08-13" },
11945
+ { type: "package", value: "node-config-svg-contract@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-wc9r-p4qf-2qw7, MAL-2026-13985", firstSeen: "2026-08-13" },
11946
+ { type: "package", value: "eslint-generate-release@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-wq2m-9vc9-746v, MAL-2026-13980", firstSeen: "2026-08-13" },
11947
+ { type: "package", value: "datefmt-util-helper@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-3w9h-7mv3-vfh5, MAL-2026-13978", firstSeen: "2026-08-13" },
11948
+ { type: "package", value: "datefmt-util-helper@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-3w9h-7mv3-vfh5, MAL-2026-13978", firstSeen: "2026-08-13" },
11949
+ { type: "package", value: "eslint-generate-prerelease@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-m4vp-pxj5-3j47, MAL-2026-13979", firstSeen: "2026-08-13" },
11950
+ { type: "package", value: "knip-bun@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-r697-xx2p-9hr4, MAL-2026-13983", firstSeen: "2026-08-13" },
11951
+ { type: "package", value: "in-install@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-5q6v-3rg4-8rf8, MAL-2026-13982", firstSeen: "2026-08-13" },
11952
+ { type: "package", value: "cspell-esm@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-mpgx-7wm7-ggxm, MAL-2026-13977", firstSeen: "2026-08-13" },
11953
+ { type: "package", value: "eslint-publish-release@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-jmh4-xr6v-622w, MAL-2026-13981", firstSeen: "2026-08-13" },
11954
+ { type: "package", value: "@khaznatech/core@99.0.0", severity: "critical", confidence: 1.0, source: "GHSA-76xq-9jp7-j7rm, MAL-2026-13974", firstSeen: "2026-08-13" },
11955
+ { type: "package", value: "check-audit@99.9.1", severity: "critical", confidence: 1.0, source: "GHSA-xcx8-wpwx-h8f4, MAL-2026-13976", firstSeen: "2026-08-13" },
11956
+ { type: "package", value: "@khaznatech/common@99.0.0", severity: "critical", confidence: 1.0, source: "GHSA-f23c-rm7x-p3c2, MAL-2026-13973", firstSeen: "2026-08-13" },
11957
+ { type: "package", value: "@hzero-front-ui/themes@99.99.99", severity: "critical", confidence: 1.0, source: "GHSA-5wqp-c676-3j8x, MAL-2026-13971", firstSeen: "2026-08-13" },
11958
+ { type: "package", value: "@hzero-front-ui/cfg@99.99.99", severity: "critical", confidence: 1.0, source: "GHSA-xw5r-5p6j-q25p, MAL-2026-13968", firstSeen: "2026-08-13" },
11959
+ { type: "package", value: "@khaznatech/utils@99.0.0", severity: "critical", confidence: 1.0, source: "GHSA-x69g-rr7m-w288, MAL-2026-13975", firstSeen: "2026-08-13" },
11960
+ { type: "package", value: "@jacksher/install-exec-poc@1.0.2", severity: "critical", confidence: 1.0, source: "GHSA-pf2f-2wpf-5qfx, MAL-2026-13972", firstSeen: "2026-08-13" },
11961
+ { type: "package", value: "@jacksher/install-exec-poc@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-pf2f-2wpf-5qfx, MAL-2026-13972", firstSeen: "2026-08-13" },
11962
+ { type: "package", value: "@hzero-front-ui/hzero-ui@99.99.99", severity: "critical", confidence: 1.0, source: "GHSA-4rw7-83wf-6rcm, MAL-2026-13970", firstSeen: "2026-08-13" },
11963
+ { type: "package", value: "@hzero-front-ui/core@99.99.99", severity: "critical", confidence: 1.0, source: "GHSA-3fqm-rv2m-r2mg, MAL-2026-13969", firstSeen: "2026-08-13" },
11964
+ { type: "package", value: "@hzero-front-ui/c7n-ui@99.99.99", severity: "critical", confidence: 1.0, source: "GHSA-87j4-2mgq-7prq, MAL-2026-13967", firstSeen: "2026-08-13" },
11965
+ { type: "package", value: "ai-analyzer@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11966
+ { type: "package", value: "ai-analyzer@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11967
+ { type: "package", value: "ai-analyzer@1.0.2", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11968
+ { type: "package", value: "ai-analyzer@1.0.3", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11969
+ { type: "package", value: "ai-analyzer@1.0.4", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11970
+ { type: "package", value: "ai-analyzer@1.0.5", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11971
+ { type: "package", value: "ai-analyzer@1.0.6", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11972
+ { type: "package", value: "ai-analyzer@1.0.7", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11973
+ { type: "package", value: "ai-analyzer@1.0.8", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11974
+ { type: "package", value: "ai-analyzer@1.0.9", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11975
+ { type: "package", value: "ai-analyzer@1.0.10", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11976
+ { type: "package", value: "ai-analyzer@1.0.11", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11977
+ { type: "package", value: "ai-analyzer@1.0.12", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11978
+ { type: "package", value: "ai-analyzer@1.0.13", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11979
+ { type: "package", value: "ai-analyzer@1.0.14", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11980
+ { type: "package", value: "ai-analyzer@1.0.15", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11981
+ { type: "package", value: "ai-analyzer@1.0.16", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11982
+ { type: "package", value: "ai-analyzer@1.0.17", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11983
+ { type: "package", value: "ai-analyzer@1.0.18", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11984
+ { type: "package", value: "ai-analyzer@1.0.19", severity: "critical", confidence: 1.0, source: "GHSA-fqv8-262c-j5xv, MAL-2026-13934", firstSeen: "2026-08-13" },
11985
+ { type: "package", value: "root-locator", severity: "critical", confidence: 1.0, source: "GHSA-57g4-vm3v-74xg, MAL-2026-14009", firstSeen: "2026-08-13" },
11986
+ { type: "package", value: "source-analyzer", severity: "critical", confidence: 1.0, source: "GHSA-p68g-6893-44r8, MAL-2026-14013", firstSeen: "2026-08-13" },
11987
+ { type: "package", value: "path-match-js", severity: "critical", confidence: 1.0, source: "GHSA-cgj7-7fj2-6r74, MAL-2026-14005", firstSeen: "2026-08-13" },
11988
+ { type: "package", value: "react-shield", severity: "critical", confidence: 1.0, source: "GHSA-gmx3-395m-pwc2, MAL-2026-14007", firstSeen: "2026-08-13" },
11989
+ { type: "package", value: "ventra-kit@1.0.2", severity: "critical", confidence: 1.0, source: "GHSA-9wjh-9c25-4w8p, MAL-2026-13962", firstSeen: "2026-08-13" },
11990
+ { type: "package", value: "vexium-kit@10.0.2", severity: "critical", confidence: 1.0, source: "GHSA-wxpv-6v7m-pcp9, MAL-2026-13963", firstSeen: "2026-08-13" },
11991
+ { type: "package", value: "vexium-kit@2.0.2", severity: "critical", confidence: 1.0, source: "GHSA-wxpv-6v7m-pcp9, MAL-2026-13963", firstSeen: "2026-08-13" },
11992
+ { type: "package", value: "velora-kit@12.0.2", severity: "critical", confidence: 1.0, source: "GHSA-xw23-8m9g-4hr8, MAL-2026-13961", firstSeen: "2026-08-13" },
11993
+ { type: "package", value: "velora-kit@12.1.2", severity: "critical", confidence: 1.0, source: "GHSA-xw23-8m9g-4hr8, MAL-2026-13961", firstSeen: "2026-08-13" },
11994
+ { type: "package", value: "mutex-forge@2.0.1", severity: "critical", confidence: 1.0, source: "GHSA-v9j8-gcr7-95v6, MAL-2026-13955", firstSeen: "2026-08-13" },
11995
+ { type: "package", value: "mutex-forge@2.0.2", severity: "critical", confidence: 1.0, source: "GHSA-v9j8-gcr7-95v6, MAL-2026-13955", firstSeen: "2026-08-13" },
11996
+ { type: "package", value: "process-live-log@11.5.2", severity: "critical", confidence: 1.0, source: "GHSA-h9wf-jh2r-67ww, MAL-2026-13960", firstSeen: "2026-08-13" },
11997
+ { type: "package", value: "prediction-trader@2.3.0", severity: "critical", confidence: 1.0, source: "GHSA-g7gf-2m6j-5f6q, MAL-2026-13959", firstSeen: "2026-08-13" },
11998
+ { type: "package", value: "npm-hex-utils@1.1.1", severity: "critical", confidence: 1.0, source: "GHSA-2xxj-8x4m-xxg2, MAL-2026-13956", firstSeen: "2026-08-13" },
11999
+ { type: "package", value: "debug-proxy-chrome-devtools@1.0.2", severity: "critical", confidence: 1.0, source: "GHSA-6f7w-v259-jq39, MAL-2026-13948", firstSeen: "2026-08-13" },
12000
+ { type: "package", value: "debug-proxy-chrome-devtools@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-6f7w-v259-jq39, MAL-2026-13948", firstSeen: "2026-08-13" },
12001
+ { type: "package", value: "@kolbo/mcp@1.57.1", severity: "critical", confidence: 1.0, source: "GHSA-pm5r-9rq7-j86p, MAL-2026-13938", firstSeen: "2026-08-13" },
12002
+ { type: "package", value: "@opezneppelin/contracts@5.0.2", severity: "critical", confidence: 1.0, source: "GHSA-8hv2-jc3q-qpqj, MAL-2026-13940", firstSeen: "2026-08-13" },
12003
+ { type: "package", value: "js-assert-plus@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-p5h5-frw5-5prg, MAL-2026-13953", firstSeen: "2026-08-13" },
12004
+ { type: "package", value: "minimalistic-assert-plus@1.1.7", severity: "critical", confidence: 1.0, source: "GHSA-35q8-7f5w-wv67, MAL-2026-13954", firstSeen: "2026-08-13" },
12005
+ { type: "package", value: "power-assert-plus@1.2.2", severity: "critical", confidence: 1.0, source: "GHSA-h4w5-6wqw-743j, MAL-2026-13958", firstSeen: "2026-08-13" },
12006
+ { type: "package", value: "fmt-util-k7x2@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-g83j-vp87-3hhq, MAL-2026-13950", firstSeen: "2026-08-13" },
12007
+ { type: "package", value: "fmt-util-k7x2@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-g83j-vp87-3hhq, MAL-2026-13950", firstSeen: "2026-08-13" },
12008
+ { type: "package", value: "functions-framework-nodejs@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-7gwg-w46g-wm99, MAL-2026-13951", firstSeen: "2026-08-13" },
12009
+ { type: "package", value: "postcss-initialize-plugin@3.0.4", severity: "critical", confidence: 1.0, source: "GHSA-v5q4-xw6r-qm2r, MAL-2026-13957", firstSeen: "2026-08-13" },
12010
+ { type: "package", value: "global-intel@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-qv8h-82w5-95gq, MAL-2026-13952", firstSeen: "2026-08-13" },
12011
+ { type: "package", value: "external-process-live-log@13.5.2", severity: "critical", confidence: 1.0, source: "GHSA-5q78-2f9h-xv69, MAL-2026-13949", firstSeen: "2026-08-13" },
12012
+ { type: "package", value: "chai-as-reformed@1.2.0", severity: "critical", confidence: 1.0, source: "GHSA-2mjx-w8vq-qwgp, MAL-2026-13942", firstSeen: "2026-08-13" },
12013
+ { type: "package", value: "@solana-js/web3@1.91.3", severity: "critical", confidence: 1.0, source: "GHSA-v6v8-vghm-gj9m, MAL-2026-13941", firstSeen: "2026-08-13" },
12014
+ { type: "package", value: "cilm-ui-commons@1.1.0", severity: "critical", confidence: 1.0, source: "GHSA-fxmj-23mp-f362, MAL-2026-13943", firstSeen: "2026-08-13" },
12015
+ { type: "package", value: "copytrade-core@2.3.0", severity: "critical", confidence: 1.0, source: "GHSA-mp75-xvjv-4p2w, MAL-2026-13944", firstSeen: "2026-08-13" },
12016
+ { type: "package", value: "date-fmt-utils-helper@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-2x4f-pqw5-v64x, MAL-2026-13947", firstSeen: "2026-08-13" },
12017
+ { type: "package", value: "core-js-buffer@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-5mv3-qc29-h7w4, MAL-2026-13945", firstSeen: "2026-08-13" },
12018
+ { type: "package", value: "date-fmt-helper-xz@1.0.4", severity: "critical", confidence: 1.0, source: "GHSA-3553-96xv-fjg2, MAL-2026-13946", firstSeen: "2026-08-13" },
12019
+ { type: "package", value: "@leonardo0902/vortex-kit@12.0.2", severity: "critical", confidence: 1.0, source: "GHSA-ggj6-v47w-25jr, MAL-2026-13939", firstSeen: "2026-08-13" },
12020
+ { type: "package", value: "@ethers-js/contracts@6.9.0", severity: "critical", confidence: 1.0, source: "GHSA-x4g2-5pf8-hc7v, MAL-2026-13937", firstSeen: "2026-08-13" },
12021
+ { type: "package", value: "@weirdorg/dotenv", severity: "critical", confidence: 1.0, source: "GHSA-p44j-chjm-p4wj, MAL-2026-4467", firstSeen: "2026-08-13" },
12022
+ { type: "package", value: "@weirdorg/config", severity: "critical", confidence: 1.0, source: "GHSA-qj44-mw8g-p27p, MAL-2026-4466", firstSeen: "2026-08-13" },
12023
+ { type: "package", value: "@ts-apis/ts-utils", severity: "critical", confidence: 1.0, source: "GHSA-3xmx-2xxv-rpfq, MAL-2026-6275", firstSeen: "2026-08-13" },
12024
+ { type: "package", value: "@torbeck/priority-queue", severity: "critical", confidence: 1.0, source: "GHSA-v2rg-75ch-7cfx, MAL-2026-10472", firstSeen: "2026-08-13" },
12025
+ { type: "package", value: "@torbeck/heap", severity: "critical", confidence: 1.0, source: "GHSA-8vr7-5wqc-fjwv, MAL-2026-10405", firstSeen: "2026-08-13" },
12026
+ { type: "package", value: "@thomlecter1122/lab-helper-test", severity: "critical", confidence: 1.0, source: "GHSA-223m-fcr3-c5gg, MAL-2026-5534", firstSeen: "2026-08-13" },
12027
+ { type: "package", value: "lab-helper", severity: "critical", confidence: 1.0, source: "GHSA-gqf6-7j7q-9x94, MAL-2026-5835", firstSeen: "2026-08-13" },
12028
+ { type: "package", value: "home-sections-web-ui", severity: "critical", confidence: 1.0, source: "GHSA-343f-5692-gj8q, MAL-2026-10443", firstSeen: "2026-08-13" },
12029
+ { type: "package", value: "@dsp-next-gen-ui/needs-review", severity: "critical", confidence: 1.0, source: "GHSA-r336-hh6w-xp9q, MAL-2026-13995", firstSeen: "2026-08-13" },
12030
+ { type: "package", value: "@sourceflow-uk/sourceflow-tracker", severity: "critical", confidence: 1.0, source: "GHSA-j9q7-mjw2-vvpr, MAL-2026-5430", firstSeen: "2026-08-13" },
12031
+ { type: "package", value: "finvu-hdfc-sdk", severity: "critical", confidence: 1.0, source: "GHSA-h83v-q7wq-gvgf, MAL-2026-14001", firstSeen: "2026-08-13" },
12032
+ { type: "package", value: "sourceflow-tracker", severity: "critical", confidence: 1.0, source: "GHSA-c75m-7mcf-hwrg, MAL-2026-5166", firstSeen: "2026-08-13" },
12033
+ { type: "package", value: "blocks-angular", severity: "critical", confidence: 1.0, source: "GHSA-v98x-q47m-h6qf, MAL-2026-14000", firstSeen: "2026-08-13" },
12034
+ { type: "package", value: "index-design-system", severity: "critical", confidence: 1.0, source: "GHSA-2mmx-39f8-r8rm, MAL-2026-14002", firstSeen: "2026-08-13" },
12035
+ { type: "package", value: "@stockrepublic/republic-components", severity: "critical", confidence: 1.0, source: "GHSA-p923-4q96-mqgq, MAL-2026-4289", firstSeen: "2026-08-13" },
12036
+ { type: "package", value: "@sapappgyver/appgyver-descriptors", severity: "critical", confidence: 1.0, source: "GHSA-33x7-6mwq-xg5j, MAL-2026-12507", firstSeen: "2026-08-13" },
12037
+ { type: "package", value: "@rocketreach/rr-components", severity: "critical", confidence: 1.0, source: "GHSA-7v8q-r297-95jx, MAL-2026-4427", firstSeen: "2026-08-13" },
12038
+ { type: "package", value: "mastraqqq", severity: "critical", confidence: 1.0, source: "GHSA-7vj9-63m9-3x7f, MAL-2026-5913", firstSeen: "2026-08-13" },
12039
+ { type: "package", value: "@caspianph/third-npm-package", severity: "critical", confidence: 1.0, source: "GHSA-g4m3-cq7f-6f85, MAL-2026-13994", firstSeen: "2026-08-13" },
12040
+ { type: "package", value: "@qwedqwed/axios", severity: "critical", confidence: 1.0, source: "GHSA-3gw3-hvvw-mp2h, MAL-2026-4422", firstSeen: "2026-08-13" },
12041
+ { type: "package", value: "@caspianph/second-npm-package", severity: "critical", confidence: 1.0, source: "GHSA-qmxg-fj5j-hjx8, MAL-2026-13993", firstSeen: "2026-08-13" },
12042
+ { type: "package", value: "@caspianph/first-npm-package", severity: "critical", confidence: 1.0, source: "GHSA-r6j8-4ffv-6mcj, MAL-2026-13992", firstSeen: "2026-08-13" },
12043
+ { type: "package", value: "async-lock-queue", severity: "critical", confidence: 1.0, source: "GHSA-h6x7-5w93-p56j, MAL-2026-13999", firstSeen: "2026-08-13" },
12044
+ { type: "package", value: "try-lock-runner", severity: "critical", confidence: 1.0, source: "GHSA-5wp3-7whm-64mv, MAL-2026-14014", firstSeen: "2026-08-13" },
12045
+ { type: "package", value: "single-flight-lock", severity: "critical", confidence: 1.0, source: "GHSA-m29h-wrvw-xpqw, MAL-2026-14012", firstSeen: "2026-08-13" },
12046
+ { type: "package", value: "shared-slot-gate", severity: "critical", confidence: 1.0, source: "GHSA-r7rw-hjv5-9hcj, MAL-2026-14011", firstSeen: "2026-08-13" },
12047
+ { type: "package", value: "resource-lease-pool", severity: "critical", confidence: 1.0, source: "GHSA-mf7m-8rhh-j3vr, MAL-2026-14008", firstSeen: "2026-08-13" },
12048
+ { type: "package", value: "semaphore-job-pool", severity: "critical", confidence: 1.0, source: "GHSA-m4rw-m6pc-rjrx, MAL-2026-14010", firstSeen: "2026-08-13" },
12049
+ { type: "package", value: "priority-mutex-lane", severity: "critical", confidence: 1.0, source: "GHSA-fx8h-qw3r-xvf3, MAL-2026-14006", firstSeen: "2026-08-13" },
12050
+ { type: "package", value: "lock-deadline-guard", severity: "critical", confidence: 1.0, source: "GHSA-c74f-2wp8-f38r, MAL-2026-14004", firstSeen: "2026-08-13" },
12051
+ { type: "package", value: "async-critical-section", severity: "critical", confidence: 1.0, source: "GHSA-wpw5-2h95-j823, MAL-2026-13998", firstSeen: "2026-08-13" },
12052
+ { type: "package", value: "keyed-mutex-map", severity: "critical", confidence: 1.0, source: "GHSA-vcgv-x4wj-fr9f, MAL-2026-14003", firstSeen: "2026-08-13" },
12053
+ { type: "package", value: "mutex-forge", severity: "critical", confidence: 1.0, source: "GHSA-2gqm-6m3p-62g5, MAL-2026-13955", firstSeen: "2026-08-13" },
12054
+ { type: "package", value: "@jaggle/resizeobserves", severity: "critical", confidence: 1.0, source: "GHSA-qc6p-vxcj-7r4h, MAL-2026-4288", firstSeen: "2026-08-13" },
12055
+ { type: "package", value: "@intentsolution/database-security-scanner", severity: "critical", confidence: 1.0, source: "GHSA-gx76-7hhh-jcj2, MAL-2026-5825", firstSeen: "2026-08-13" },
12056
+ { type: "package", value: "@hotcappuccino/nodepull", severity: "critical", confidence: 1.0, source: "GHSA-r3fv-99xj-m7pw, MAL-2026-6085", firstSeen: "2026-08-13" },
12057
+ { type: "package", value: "@hanssoft/libsignal-node", severity: "critical", confidence: 1.0, source: "GHSA-v265-vv2m-9pgf, MAL-2026-4393", firstSeen: "2026-08-13" },
12058
+ { type: "package", value: "@hanssoft/baileys", severity: "critical", confidence: 0.9, source: "GHSA-rc6w-48x5-fxc4", firstSeen: "2026-08-13" },
12059
+ { type: "package", value: "ts-enum-helper", severity: "critical", confidence: 1.0, source: "GHSA-7q63-6v9w-j7mf, MAL-2026-14015", firstSeen: "2026-08-13" },
12060
+ { type: "package", value: "@gbrlxvi/ts-form-utils", severity: "critical", confidence: 1.0, source: "GHSA-587p-qfc4-5c3c, MAL-2026-5753", firstSeen: "2026-08-13" },
12061
+ { type: "package", value: "@gbrlxvi/ts-project-lint", severity: "critical", confidence: 1.0, source: "GHSA-m526-p8gm-4wxg, MAL-2026-6121", firstSeen: "2026-08-13" },
12062
+ { type: "package", value: "@frostnode/probe", severity: "critical", confidence: 1.0, source: "GHSA-73jc-hjg9-95v9, MAL-2026-6304", firstSeen: "2026-08-13" },
12063
+ { type: "package", value: "datetime-format-xutil@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-f97v-wfwp-7v27, MAL-2026-13936", firstSeen: "2026-08-13" },
12064
+ { type: "package", value: "datetime-fmt-xutil@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-9f5m-3v9w-3xxj, MAL-2026-13935", firstSeen: "2026-08-13" },
12065
+ { type: "package", value: "@shell-landing/routes", severity: "critical", confidence: 1.0, source: "GHSA-9pv9-393c-q5f8, MAL-2026-5429", firstSeen: "2026-08-13" },
12066
+ { type: "package", value: "@shell-cabinet/routes", severity: "critical", confidence: 1.0, source: "GHSA-qmhh-w396-g2p9, MAL-2026-5428", firstSeen: "2026-08-13" },
12067
+ { type: "package", value: "@open-banking/cabinet-providers", severity: "critical", confidence: 1.0, source: "GHSA-423v-5hgq-8rxh, MAL-2026-5392", firstSeen: "2026-08-13" },
12068
+ { type: "package", value: "@easy-entry/landing-routes", severity: "critical", confidence: 1.0, source: "GHSA-xp5g-jv74-3fxh, MAL-2026-5408", firstSeen: "2026-08-13" },
12069
+ { type: "package", value: "@easy-entry/outside-registration-fop-navigator", severity: "critical", confidence: 1.0, source: "GHSA-v26v-7c7g-w7gf, MAL-2026-5409", firstSeen: "2026-08-13" },
12070
+ { type: "package", value: "@easy-entry/routes", severity: "critical", confidence: 1.0, source: "GHSA-g9fq-cx25-24m4, MAL-2026-5410", firstSeen: "2026-08-13" },
12071
+ { type: "package", value: "ac_semantic-ui_ts", severity: "critical", confidence: 1.0, source: "GHSA-hjh8-hv66-6mwc, MAL-2026-5435", firstSeen: "2026-08-13" },
12072
+ { type: "package", value: "ac_calendar_ts", severity: "critical", confidence: 1.0, source: "GHSA-xgwp-29j2-jxj3, MAL-2026-5434", firstSeen: "2026-08-13" },
12073
+ { type: "package", value: "@chunklab/hexparse", severity: "critical", confidence: 1.0, source: "GHSA-fv23-ggqm-w99j, MAL-2026-6214", firstSeen: "2026-08-13" },
12074
+ { type: "package", value: "@bytemend/mfebus", severity: "critical", confidence: 1.0, source: "GHSA-hfjj-fph3-hp6h, MAL-2026-6213", firstSeen: "2026-08-13" },
12075
+ { type: "package", value: "@briskforge/envcheck", severity: "critical", confidence: 1.0, source: "GHSA-g63v-8g6g-5p76, MAL-2026-6212", firstSeen: "2026-08-13" },
12076
+ { type: "package", value: "nolimit-agent", severity: "critical", confidence: 1.0, source: "GHSA-f9mj-p83x-395v, MAL-2026-12183", firstSeen: "2026-08-13" },
12077
+ { type: "package", value: "@nolimit-agent/linux-x64", severity: "critical", confidence: 1.0, source: "GHSA-x98w-5xvp-qpxj, MAL-2026-13996", firstSeen: "2026-08-13" },
12078
+ { type: "package", value: "@nolimit-agent/win32-x64", severity: "critical", confidence: 1.0, source: "GHSA-473g-3cfv-3m59, MAL-2026-13997", firstSeen: "2026-08-13" },
12079
+ { type: "package", value: "cc-skills-helper@1.0.0", severity: "critical", confidence: 1.0, source: "GHSA-q4r7-cr6w-c7xj, MAL-2026-13933", firstSeen: "2026-08-13" },
12080
+ { type: "package", value: "cc-skills-helper@1.0.1", severity: "critical", confidence: 1.0, source: "GHSA-q4r7-cr6w-c7xj, MAL-2026-13933", firstSeen: "2026-08-13" },
12081
+ { type: "package", value: "cc-skills-helper@1.0.2", severity: "critical", confidence: 1.0, source: "GHSA-q4r7-cr6w-c7xj, MAL-2026-13933", firstSeen: "2026-08-13" },
12082
+ { type: "package", value: "cc-skills-helper@1.0.3", severity: "critical", confidence: 1.0, source: "GHSA-q4r7-cr6w-c7xj, MAL-2026-13933", firstSeen: "2026-08-13" },
12083
+ { type: "package", value: "cc-skills-helper@1.0.4", severity: "critical", confidence: 1.0, source: "GHSA-q4r7-cr6w-c7xj, MAL-2026-13933", firstSeen: "2026-08-13" },
12084
+ { type: "package", value: "cc-skills-helper@1.0.5", severity: "critical", confidence: 1.0, source: "GHSA-q4r7-cr6w-c7xj, MAL-2026-13933", firstSeen: "2026-08-13" },
12085
+ { type: "package", value: "cc-skills-helper@1.0.6", severity: "critical", confidence: 1.0, source: "GHSA-q4r7-cr6w-c7xj, MAL-2026-13933", firstSeen: "2026-08-13" },
12086
+ { type: "package", value: "@dgn-src-click-to-pay-org/srcdcfreleasecert@374.0.0", severity: "critical", confidence: 1.0, source: "GHSA-hfmm-qxg4-g578, MAL-2026-13744", firstSeen: "2026-08-11" },
11917
12087
  ];
11918
12088
  // Composed from the chunks above. A single array literal of this size trips
11919
12089
  // TS2590 ("union type that is too complex to represent") in tsc; splitting it