What we've been watching.

• Critical11 May 2026

  178 packages tracked

  TanStack + @uipath mini-Shai-Hulud compromise

  Between 19:20–19:26 UTC on 2026-05-11, an attacker pushed malicious versions across @tanstack/*, @uipath/*, @mistralai/*, @squawk/*, @tallyui/*, @mesadev/*, @cap-js/*, and many smaller packages by chaining `pull_request_target`, GitHub Actions cache poisoning, and runtime memory extraction of an OIDC token from the runner. Same credential-stealing worm payload as the April SAP campaign. Wiz updated the affected-package table on 2026-05-12.

  npmPyPI

  Affected packages180 packages · 415 versions

  • npm@beproduct/nestjs-auth
    0.1.20.1.30.1.40.1.50.1.60.1.70.1.80.1.90.1.100.1.110.1.120.1.130.1.140.1.150.1.160.1.170.1.180.1.19
  • npm@cap-js/db-service
    2.10.1
  • npm@cap-js/postgres
    2.2.2
  • npm@cap-js/sqlite
    2.2.2
  • npm@dirigible-ai/sdk
    0.6.20.6.3
  • npm@draftauth/client
    0.2.10.2.2
  • npm@draftauth/core
    0.13.10.13.2
  • npm@draftlab/auth
    0.24.10.24.2
  • npm@draftlab/auth-router
    0.5.10.5.2
  • npm@draftlab/db
    0.16.10.16.2
  • npm@mesadev/rest
    0.28.3
  • npm@mesadev/saguaro
    0.4.22
  • npm@mesadev/sdk
    0.28.3
  • npm@mistralai/mistralai
    2.2.22.2.32.2.4
  • npm@mistralai/mistralai-azure
    1.7.11.7.21.7.3
  • npm@mistralai/mistralai-gcp
    1.7.11.7.21.7.3
  • npm@ml-toolkit-ts/preprocessing
    1.0.21.0.3
  • npm@ml-toolkit-ts/xgboost
    1.0.31.0.4
  • npm@opensearch-project/opensearch
    3.5.33.6.23.7.03.8.0
  • npm@squawk/airport-data
    0.7.40.7.50.7.60.7.70.7.8
  • npm@squawk/airports
    0.6.20.6.30.6.40.6.50.6.6
  • npm@squawk/airspace
    0.8.10.8.20.8.30.8.40.8.5
  • npm@squawk/airspace-data
    0.5.30.5.40.5.50.5.60.5.7
  • npm@squawk/airway-data
    0.5.40.5.50.5.60.5.70.5.8
  • npm@squawk/airways
    0.4.20.4.30.4.40.4.50.4.6
  • npm@squawk/fix-data
    0.6.40.6.50.6.60.6.70.6.8
  • npm@squawk/fixes
    0.3.20.3.30.3.40.3.50.3.6
  • npm@squawk/flight-math
    0.5.40.5.50.5.60.5.70.5.8
  • npm@squawk/flightplan
    0.5.20.5.30.5.40.5.50.5.6
  • npm@squawk/geo
    0.4.40.4.50.4.60.4.70.4.8
  • npm@squawk/icao-registry
    0.5.20.5.30.5.40.5.50.5.6
  • npm@squawk/icao-registry-data
    0.8.40.8.50.8.60.8.70.8.8
  • npm@squawk/mcp
    0.9.10.9.20.9.30.9.40.9.5
  • npm@squawk/navaid-data
    0.6.40.6.50.6.60.6.70.6.8
  • npm@squawk/navaids
    0.4.20.4.30.4.40.4.50.4.6
  • npm@squawk/notams
    0.3.60.3.70.3.80.3.90.3.10
  • npm@squawk/procedure-data
    0.7.30.7.40.7.50.7.60.7.7
  • npm@squawk/procedures
    0.5.20.5.30.5.40.5.50.5.6
  • npm@squawk/types
    0.8.10.8.20.8.30.8.40.8.5
  • npm@squawk/units
    0.4.30.4.40.4.50.4.60.4.7
  • npm@squawk/weather
    0.5.60.5.70.5.80.5.90.5.10
  • npm@supersurkhet/cli
    0.0.20.0.30.0.40.0.50.0.60.0.7
  • npm@supersurkhet/sdk
    0.0.20.0.30.0.40.0.50.0.60.0.7
  • npm@tallyui/components
    1.0.11.0.21.0.3
  • npm@tallyui/connector-medusa
    1.0.11.0.21.0.3
  • npm@tallyui/connector-shopify
    1.0.11.0.21.0.3
  • npm@tallyui/connector-vendure
    1.0.11.0.21.0.3
  • npm@tallyui/connector-woocommerce
    1.0.11.0.21.0.3
  • npm@tallyui/core
    0.2.10.2.20.2.3
  • npm@tallyui/database
    1.0.11.0.21.0.3
  • npm@tallyui/pos
    0.1.10.1.20.1.3
  • npm@tallyui/storage-sqlite
    0.2.10.2.20.2.3
  • npm@tallyui/theme
    0.2.10.2.20.2.3
  • npm@tanstack/arktype-adapter
    1.166.121.166.15
  • npm@tanstack/eslint-plugin-router
    1.161.91.161.12
  • npm@tanstack/eslint-plugin-start
    0.0.40.0.7
  • npm@tanstack/history
    1.161.91.161.12
  • npm@tanstack/nitro-v2-vite-plugin
    1.154.121.154.15
  • npm@tanstack/react-router
    1.169.51.169.8
  • npm@tanstack/react-router-devtools
    1.166.161.166.19
  • npm@tanstack/react-router-ssr-query
    1.166.151.166.18
  • npm@tanstack/react-start
    1.167.681.167.71
  • npm@tanstack/react-start-client
    1.166.511.166.54
  • npm@tanstack/react-start-rsc
    0.0.470.0.50
  • npm@tanstack/react-start-server
    1.166.551.166.58
  • npm@tanstack/router-cli
    1.166.461.166.49
  • npm@tanstack/router-core
    1.169.51.169.8
  • npm@tanstack/router-devtools
    1.166.161.166.19
  • npm@tanstack/router-devtools-core
    1.167.61.167.9
  • npm@tanstack/router-generator
    1.166.451.166.48
  • npm@tanstack/router-plugin
    1.167.381.167.41
  • npm@tanstack/router-ssr-query-core
    1.168.31.168.6
  • npm@tanstack/router-utils
    1.161.111.161.14
  • npm@tanstack/router-vite-plugin
    1.166.531.166.56
  • npm@tanstack/solid-router
    1.169.51.169.8
  • npm@tanstack/solid-router-devtools
    1.166.161.166.19
  • npm@tanstack/solid-router-ssr-query
    1.166.151.166.18
  • npm@tanstack/solid-start
    1.167.651.167.68
  • npm@tanstack/solid-start-client
    1.166.501.166.53
  • npm@tanstack/solid-start-server
    1.166.541.166.57
  • npm@tanstack/start-client-core
    1.168.51.168.8
  • npm@tanstack/start-fn-stubs
    1.161.91.161.12
  • npm@tanstack/start-plugin-core
    1.169.231.169.26
  • npm@tanstack/start-server-core
    1.167.331.167.36
  • npm@tanstack/start-static-server-functions
    1.166.441.166.47
  • npm@tanstack/start-storage-context
    1.166.381.166.41
  • npm@tanstack/valibot-adapter
    1.166.121.166.15
  • npm@tanstack/virtual-file-routes
    1.161.101.161.13
  • npm@tanstack/vue-router
    1.169.51.169.8
  • npm@tanstack/vue-router-devtools
    1.166.161.166.19
  • npm@tanstack/vue-router-ssr-query
    1.166.151.166.18
  • npm@tanstack/vue-start
    1.167.611.167.64
  • npm@tanstack/vue-start-client
    1.166.461.166.49
  • npm@tanstack/vue-start-server
    1.166.501.166.53
  • npm@tanstack/zod-adapter
    1.166.121.166.15
  • npm@taskflow-corp/cli
    0.1.240.1.250.1.260.1.270.1.280.1.29
  • npm@tolka/cli
    1.0.21.0.31.0.41.0.51.0.6
  • npm@uipath/access-policy-sdk
    0.3.1
  • npm@uipath/access-policy-tool
    0.3.1
  • npm@uipath/admin-tool
    0.1.1
  • npm@uipath/agent-sdk
    1.0.2
  • npm@uipath/agent-tool
    1.0.1
  • npm@uipath/agent.sdk
    0.0.18
  • npm@uipath/aops-policy-tool
    0.3.1
  • npm@uipath/ap-chat
    1.5.7
  • npm@uipath/api-workflow-tool
    1.0.1
  • npm@uipath/apollo-core
    5.9.2
  • npm@uipath/apollo-react
    4.24.5
  • npm@uipath/apollo-wind
    2.16.2
  • npm@uipath/auth
    1.0.1
  • npm@uipath/case-tool
    1.0.1
  • npm@uipath/cli
    1.0.1
  • npm@uipath/codedagent-tool
    1.0.1
  • npm@uipath/codedagents-tool
    0.1.12
  • npm@uipath/codedapp-tool
    1.0.1
  • npm@uipath/common
    1.0.1
  • npm@uipath/context-grounding-tool
    0.1.1
  • npm@uipath/data-fabric-tool
    1.0.2
  • npm@uipath/docsai-tool
    1.0.1
  • npm@uipath/filesystem
    1.0.1
  • npm@uipath/flow-tool
    1.0.2
  • npm@uipath/functions-tool
    1.0.1
  • npm@uipath/gov-tool
    0.3.1
  • npm@uipath/identity-tool
    0.1.1
  • npm@uipath/insights-sdk
    1.0.1
  • npm@uipath/insights-tool
    1.0.1
  • npm@uipath/integrationservice-sdk
    1.0.2
  • npm@uipath/integrationservice-tool
    1.0.2
  • npm@uipath/llmgw-tool
    1.0.1
  • npm@uipath/maestro-sdk
    1.0.1
  • npm@uipath/maestro-tool
    1.0.1
  • npm@uipath/orchestrator-tool
    1.0.1
  • npm@uipath/packager-tool-apiworkflow
    0.0.19
  • npm@uipath/packager-tool-bpmn
    0.0.9
  • npm@uipath/packager-tool-case
    0.0.9
  • npm@uipath/packager-tool-connector
    0.0.19
  • npm@uipath/packager-tool-flow
    0.0.19
  • npm@uipath/packager-tool-functions
    0.1.1
  • npm@uipath/packager-tool-webapp
    1.0.6
  • npm@uipath/packager-tool-workflowcompiler
    0.0.16
  • npm@uipath/packager-tool-workflowcompiler-browser
    0.0.34
  • npm@uipath/platform-tool
    1.0.1
  • npm@uipath/project-packager
    1.1.16
  • npm@uipath/resource-tool
    1.0.1
  • npm@uipath/resourcecatalog-tool
    0.1.1
  • npm@uipath/resources-tool
    0.1.11
  • npm@uipath/robot
    1.3.4
  • npm@uipath/rpa-legacy-tool
    1.0.1
  • npm@uipath/rpa-tool
    0.9.5
  • npm@uipath/solution-packager
    0.0.35
  • npm@uipath/solution-tool
    1.0.1
  • npm@uipath/solutionpackager-sdk
    1.0.11
  • npm@uipath/solutionpackager-tool-core
    0.0.34
  • npm@uipath/tasks-tool
    1.0.1
  • npm@uipath/telemetry
    0.0.7
  • npm@uipath/test-manager-tool
    1.0.2
  • npm@uipath/tool-workflowcompiler
    0.0.12
  • npm@uipath/traces-tool
    1.0.1
  • npm@uipath/ui-widgets-multi-file-upload
    1.0.1
  • npm@uipath/uipath-python-bridge
    1.0.1
  • npm@uipath/vertical-solutions-tool
    1.0.1
  • npm@uipath/vss
    0.1.6
  • npm@uipath/widget.sdk
    1.2.3
  • npmagentwork-cli
    0.1.40.1.5
  • npmcmux-agent-mcp
    0.1.30.1.40.1.50.1.60.1.70.1.8
  • npmcross-stitch
    1.1.31.1.41.1.51.1.61.1.7
  • npmgit-branch-selector
    1.3.31.3.41.3.51.3.61.3.7
  • npmgit-git-git
    1.0.81.0.91.0.101.0.111.0.12
  • npmguardrails-ai
    0.10.1
  • PyPIguardrails-ai
    0.10.1
  • npmintercom-client
    7.0.4
  • npmlightning
    2.6.22.6.3
  • npmmbt
    1.2.48
  • npmmistralai
    2.4.6
  • PyPImistralai
    2.4.6
  • npmml-toolkit-ts
    1.0.41.0.5
  • npmnextmove-mcp
    0.1.30.1.40.1.50.1.60.1.7
  • npmsafe-action
    0.8.30.8.4
  • npmts-dna
    3.0.13.0.23.0.33.0.43.0.5
  • npmwot-api
    0.8.10.8.20.8.30.8.4

  npm-2026-05-shai-hulud-tanstackSource advisory
• High1 May 2026

  16 packages tracked

  BufferZoneCorp sleeper attack on RubyGems + Go modules

  Socket disclosed a coordinated sleeper-package campaign attributed to the GitHub org `BufferZoneCorp` (and RubyGems user `knot-theory`). Initially-clean Ruby gems and Go modules were updated to malicious versions. The Ruby side harvests env vars, SSH keys, AWS secrets, .npmrc, .netrc, GitHub CLI config, and RubyGems credentials; the Go side tampers with GitHub Actions workflows, injects fake executables, and adds SSH persistence via authorized_keys. First confirmed 2026 RubyGems + Go module supply-chain campaign.

  GoRubyGems

  Affected packages16 packages · 0 versions

  • Gogithub.com/BufferZoneCorp/config-loader
  • Gogithub.com/BufferZoneCorp/go-envconfig
  • Gogithub.com/BufferZoneCorp/go-metrics-sdk
  • Gogithub.com/BufferZoneCorp/go-retryablehttp
  • Gogithub.com/BufferZoneCorp/go-stdlib-ext
  • Gogithub.com/BufferZoneCorp/go-weather-sdk
  • Gogithub.com/BufferZoneCorp/grpc-client
  • Gogithub.com/BufferZoneCorp/log-core
  • Gogithub.com/BufferZoneCorp/net-helper
  • RubyGemsknot-activesupport-logger
  • RubyGemsknot-date-utils-rb
  • RubyGemsknot-devise-jwt-helper
  • RubyGemsknot-rack-session-store
  • RubyGemsknot-rails-assets-pipeline
  • RubyGemsknot-rspec-formatter-json
  • RubyGemsknot-simple-formatter

  multi-2026-05-01-bufferzonecorp-rubygems-goSource advisory
• Critical30 Apr 2026

  3 packages tracked

  PyTorch Lightning + intercom-client + intercom-php coordinated push

  Mini Shai-Hulud wave 2: coordinated April 30 release of `lightning` 2.6.2/2.6.3 (PyPI), `intercom-client` 7.0.4/7.0.5 (npm), and `intercom/intercom-php` 5.0.2 (Packagist) carrying the same Bun-based credential stealer used in the SAP/@cap-js wave. ~11.7MB `router_runtime.js` fires preinstall on npm; a `.pth` file fires at every Python import on PyPI. Worm propagation via stolen GitHub PATs labelled "OhNoWhatsGoingOnWithGitHub:".

  npmPackagistPyPI

  Affected packages3 packages · 5 versions

  • npmintercom-client
    7.0.47.0.5
  • Packagistintercom/intercom-php
    5.0.2
  • PyPIlightning
    2.6.22.6.3

  multi-2026-04-30-mini-shai-hulud-wave2Source advisory
• High29 Apr 2026

  9 packages tracked

  DPRK "PromptMink" campaign uses AI agents to insert @validate-sdk/v2 dependency

  ReversingLabs traced a DPRK Famous Chollima / UNC1069 campaign that began with `@hash-validator/v2` in Sept 2025 and evolved through Feb 28, 2026 to insert `@validate-sdk/v2` as the malicious dependency of benign-looking "bait" SDKs aimed at AI coding agents. One AI-authored commit pulled `@solana-launchpad/sdk` into a crypto trading repo. Phase 4 in March 2026 used Rust NAPI modules and 85MB Node SEA bundles to exfiltrate full source trees. 300+ malicious package versions across 60+ unique packages observed.

  npmPyPI

  Affected packages9 packages · 22 versions

  • npm@hash-validator/v2
  • npm@meme-sdk/trade
  • npm@pumpfun-ipfs/sdk
  • npm@solana-ipfs/sdk
  • npm@solana-launchpad/sdk
  • npm@solmasterv3/solana-metadata-sdk
  • npm@validate-ethereum-address/core
  • npm@validate-sdk/v2
    1.22.111.22.121.22.131.22.141.22.151.22.161.22.171.22.181.22.191.22.201.22.211.22.221.22.231.22.241.22.251.22.261.22.271.22.281.22.291.22.301.22.31
  • PyPIscraper-npm
    1.0.4

  multi-2026-04-29-promptmink-validate-sdkSource advisory
• Critical29 Apr 2026

  4 packages tracked

  SAP / @cap-js mini-Shai-Hulud campaign

  Mini-Shai-Hulud-style attack against SAP-related npm packages on 2026-04-29 09:55–12:14 UTC. Preinstall `setup.mjs` downloads the Bun runtime, runs an obfuscated `execution.js` that exfils GitHub/npm tokens, AWS/Azure/GCP secrets, Kubernetes tokens, and browser passwords via the GitHub GraphQL API. Includes a Russian-locale guardrail and persistence via .claude/ and .vscode/ poisoning.

  npm

  Affected packages4 packages · 4 versions

  • npm@cap-js/db-service
    2.10.1
  • npm@cap-js/postgres
    2.2.2
  • npm@cap-js/sqlite
    2.2.2
  • npmmbt
    1.2.48

  npm-2026-04-sap-cap-jsSource advisory
• Critical24 Apr 2026

  2 packages tracked

  elementary-data PyPI package backdoored via GitHub Actions injection

  An attacker (account `realtungtungtungsahur`) exploited a script-injection flaw in the `elementary-data` release workflow via PR comment, then used the workflow token to forge release commit b1e4b1f3 and trigger the legitimate publishing pipeline. PyPI `elementary-data` 0.23.3 and ghcr.io/elementary-data/elementary 0.23.3 + `latest` shipped a ~245 KB obfuscated payload in `elementary.pth`. Clean 0.23.4 published April 25.

  DockerPyPI

  Affected packages2 packages · 3 versions

  • PyPIelementary-data
    0.23.3
  • Dockerghcr.io/elementary-data/elementary
    0.23.3latest

  pypi-2026-04-24-elementary-dataSource advisory
• High23 Apr 2026

  1 package tracked

  js-logger-pack npm worm uses Hugging Face datasets as malware CDN + exfil store

  JFrog found 27 malicious versions of `js-logger-pack` (1.1.0-1.1.27) abusing the Hugging Face repo `Lordplay/system-releases` to fetch cross-platform binaries (Windows/macOS x64/macOS ARM64/Linux) and upload stolen data to private datasets. The malware adds keylogging, clipboard capture, browser-session and Telegram Desktop theft, plus an operator command channel.

  npm

  Affected packages1 package · 28 versions

  • npmjs-logger-pack
    1.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.111.1.121.1.131.1.141.1.151.1.161.1.171.1.181.1.191.1.201.1.211.1.221.1.231.1.241.1.251.1.261.1.27

  npm-2026-04-23-js-logger-pack-huggingfaceSource advisory
• Critical22 Apr 2026

  1 package tracked

  Xinference PyPI package backdoored on import

  JFrog flagged three consecutive `xinference` releases (2.6.0-2.6.2) on PyPI carrying a TeamPCP-style payload embedded in `xinference/__init__.py` that fires on import. The malware base64-encodes a stage-1 wrapper containing the comment `# hacked by teampcp`, then spawns a detached subprocess that bundles harvested data into `love.tar.gz` and POSTs it with a custom `X-QT-SR: 14` header. TeamPCP publicly denied involvement, claiming a copycat. 600,000+ downloads of malicious wheels.

  PyPI

  Affected packages1 package · 3 versions

  • PyPIxinference
    2.6.02.6.12.6.2

  pypi-2026-04-22-xinference-teampcpSource advisory
• Critical22 Apr 2026

  3 packages tracked

  Checkmarx KICS Docker images + Open VSX extensions compromised (TeamPCP)

  Docker and Socket jointly disclosed a multi-stage compromise of Checkmarx KICS Docker images and Checkmarx VS Code / Open VSX extensions. Trojanised extensions silently install an MCP addon executed via Bun, while the Docker images include a modified KICS binary that encrypts scan output and exfiltrates it. TeamPCP claimed responsibility.

  DockerOpen VSX

  Affected packages3 packages · 11 versions

  • Open VSXcheckmarx.ast-results
    2.63.02.66.0
  • Open VSXcheckmarx.cx-dev-assist
    1.17.01.19.0
  • Dockercheckmarx/kics
    2.1.202.1.20-debian2.1.212.1.21-debianalpinedebianlatest

  multi-2026-04-22-checkmarx-kics-vsx-dockerSource advisory
• Critical22 Apr 2026

  1 package tracked

  @bitwarden/cli 2026.4.0 hijacked via Checkmarx GitHub Actions breach

  TeamPCP pushed a malicious `@bitwarden/cli@2026.4.0` to npm between 17:57 and 19:30 ET on April 22, exploiting Bitwarden's use of the breached `checkmarx/ast-github-action`. `bw_setup.js` fetched Bun 1.3.13 from GitHub and ran a payload that targeted SSH, Git, npm, AWS/GCP/Azure, GitHub Actions secrets, and AI/MCP configs (`.claude.json`, `.kiro/settings/mcp.json`), exfiltrating via `audit.checkmarx.cx`. Live ~90 minutes; Bitwarden confirmed no end-user vault data was accessed.

  npm

  Affected packages1 package · 1 version

  • npm@bitwarden/cli
    2026.4.0

  npm-2026-04-22-bitwarden-cli-teampcpSource advisory
• Critical21 Apr 2026

  6 packages tracked

  CanisterSprawl: self-propagating npm worm hits pgserve + Namastex packages

  Socket and StepSecurity disclosed CanisterSprawl, a self-propagating npm worm that compromised at least 16 versions across Namastex Labs and related publishers from 21 April 2026. The postinstall hook harvests 38 env vars and filesystem secrets, encrypts via AES-256-CBC + RSA-4096, and exfiltrates to an Internet Computer Protocol canister. Stolen npm tokens are reused to publish further malicious versions. Tradecraft matches the earlier TeamPCP CanisterWorm campaign.

  npm

  Affected packages6 packages · 16 versions

  • npm@automagik/genie
    4.260421.334.260421.344.260421.354.260421.364.260421.374.260421.384.260421.39
  • npm@fairwords/loopback-connector-es
    1.4.31.4.4
  • npm@fairwords/websocket
    1.0.381.0.39
  • npm@openwebconcept/design-tokens
    1.0.3
  • npm@openwebconcept/theme-owc
    1.0.3
  • npmpgserve
    1.1.111.1.121.1.13

  npm-2026-04-21-canisterworm-pgserve-namastexSource advisory
• High15 Apr 2026

  36 packages tracked

  36 fake Strapi plugins on npm deploy persistent implants

  Four sock-puppet npm accounts (umarbek1233, kekylf12, tikeqemif26, umar_bektembiev1) uploaded 36 packages over a ~13-hour window impersonating Strapi CMS plugins. Payload evolution moved through 8 variants targeting Redis RCE with cron injection, Docker container escapes, PostgreSQL exploitation on hosts named `prod-strapi`, Python reverse shells on port 4444, and SSH-key backdoors.

  npm

  Affected packages36 packages · 0 versions

  • npmstrapi-plugin-advanced-uuid
  • npmstrapi-plugin-api
  • npmstrapi-plugin-blurhash
  • npmstrapi-plugin-cms-tools
  • npmstrapi-plugin-config
  • npmstrapi-plugin-content-sync
  • npmstrapi-plugin-core
  • npmstrapi-plugin-cron
  • npmstrapi-plugin-database
  • npmstrapi-plugin-debug-tools
  • npmstrapi-plugin-events
  • npmstrapi-plugin-finseven
  • npmstrapi-plugin-form
  • npmstrapi-plugin-guardarian-ext
  • npmstrapi-plugin-health
  • npmstrapi-plugin-health-check
  • npmstrapi-plugin-hextest
  • npmstrapi-plugin-hooks
  • npmstrapi-plugin-locale
  • npmstrapi-plugin-logger
  • npmstrapi-plugin-monitor
  • npmstrapi-plugin-nordica
  • npmstrapi-plugin-nordica-api
  • npmstrapi-plugin-nordica-cms
  • npmstrapi-plugin-nordica-deep
  • npmstrapi-plugin-nordica-lite
  • npmstrapi-plugin-nordica-recon
  • npmstrapi-plugin-nordica-stage
  • npmstrapi-plugin-nordica-sync
  • npmstrapi-plugin-nordica-tools
  • npmstrapi-plugin-nordica-vhost
  • npmstrapi-plugin-notify
  • npmstrapi-plugin-seed
  • npmstrapi-plugin-server
  • npmstrapi-plugin-sitemap-gen
  • npmstrapi-plugin-sync

  npm-2026-04-15-strapi-pluginsSource advisory
• High15 Apr 2026

  1 package tracked

  @kindo/selfbot npm package delivers XWorm RAT via 5-stage Astral Warfare chain

  JFrog identified `@kindo/selfbot` (XRAY-964727), a video-game-themed Discord selfbot npm package. A 5-stage chain (JS downloader → 250KB obfuscated batch → PowerShell process injection → XOR-decoded shellcode → XWormClient .NET RAT) installed itself against `explorer.exe` with AMSI/ETW evasion.

  npm

  Affected packages1 package · 5 versions

  • npm@kindo/selfbot
    1.0.01.0.11.0.21.0.31.0.4

  npm-2026-04-15-kindo-selfbot-xwormSource advisory
• High14 Apr 2026

  5 packages tracked

  5 NuGet packages impersonate Chinese .NET UI libraries with infostealer payload

  NuGet publisher `bmrxntfj` shipped five packages on 14 April 2026 within ~13 seconds, grafting a .NET Reactor-protected infostealer onto decompiled legitimate libraries. Across 219 total versions they accumulated ~65k downloads, targeting browser creds, crypto wallets, and SSH keys on Windows .NET dev hosts.

  NuGet

  Affected packages5 packages · 5 versions

  • NuGetIR.DantUI
    2.1.55
  • NuGetIR.Infrastructure.Core
    2.1.55
  • NuGetIR.Infrastructure.DataService.Core
    2.1.55
  • NuGetIR.iplus32
    2.1.55
  • NuGetIR.OscarUI
    2.1.55

  nuget-2026-04-14-chinese-ui-impersonatorsSource advisory
• High7 Apr 2026

  14 packages tracked

  DPRK Contagious Interview campaign expands across 5 ecosystems

  Socket disclosed a fresh wave of DPRK Contagious Interview / FAMOUS CHOLLIMA packages spanning npm, PyPI, Go modules, crates.io, and Packagist. They impersonate logging / license developer tooling and act as staged loaders for credential stealers and RATs across Windows, macOS and Linux. The Windows variant deploys a keylogger and AnyDesk for hands-on access.

  crates.ioGonpmPackagistPyPI

  Affected packages14 packages · 6 versions

  • PyPIapachelicense
    0.1a1
  • npmdebug-fmt
  • npmdebug-glitz
  • npmdev-log-core
    1.0.5
  • PyPIfluxhttp
  • Gogithub.com/aokisasakidev/mit-license-pkg
    1.0.2
  • Gogithub.com/golangorg/formstash
    1.0.5
  • Packagistgolangorg/logkit
  • PyPIlicense-utils-kit
    0.1rc3
  • npmlogger-base
  • npmlogkitx
  • crates.iologtrace
    1.0.2
  • PyPIlogutilkit
  • npmpino-debugger

  multi-2026-04-07-contagious-interview-5-ecosystemsSource advisory
• Medium5 Apr 2026

  1 package tracked

  hermes-px PyPI "privacy" AI proxy steals prompts via stolen university infra

  JFrog detected `hermes-px`, masquerading as a privacy-preserving AI proxy. It routed requests through Tor to a stolen Tunisian university API and bundled a 246K-character Anthropic Claude system prompt rebranded as "AXIOM-1". It simultaneously exfiltrated all prompts/responses unencrypted to a Supabase endpoint, bypassing Tor and exposing user IPs.

  PyPI

  Affected packages1 package · 0 versions

  • PyPIhermes-px

  pypi-2026-04-05-hermes-pxSource advisory
• Critical31 Mar 2026

  4 packages tracked

  Axios npm compromise (North Korea-nexus RAT)

  Lead-maintainer account compromised via social engineering. Two malicious axios releases pulled in plain-crypto-js, whose postinstall fetched a cross-platform RAT from sfrclak[.]com:8000. Microsoft + Google attribute to Sapphire Sleet / UNC1069 (North Korea-nexus). Live for ~3 hours; ~100M weekly downloads in scope.

  npm

  Affected packages4 packages · 8 versions

  • npm@qqbrowser/openclaw-qbot
    0.0.130
  • npm@shadanai/openclaw
    2026.3.28-22026.3.28-32026.3.31-12026.3.31-2
  • npmaxios
    1.14.10.30.4
  • npmplain-crypto-js
    4.2.1

  npm-2026-03-axiosSource advisory
• High31 Mar 2026

  1 package tracked

  LofyGang returns with undicy-http typosquat delivering dual-payload RAT

  JFrog tied `undicy-http@2.0.0` (a typosquat of `undici`) to the Brazil-based LofyGang group last seen in 2022. The package pairs a Node.js WebSocket RAT with a native `chromelevator.exe` binary that uses direct syscalls for process hollowing, then injects browser credential stealers targeting 50+ browsers and 90+ wallet extensions.

  npm

  Affected packages1 package · 1 version

  • npmundicy-http
    2.0.0

  npm-2026-03-31-undicy-lofygangSource advisory
• Critical27 Mar 2026

  1 package tracked

  Telnyx Python SDK hides credential stealer in WAV-file steganography

  TeamPCP published malicious `telnyx` 4.87.1 and 4.87.2 to PyPI on 27 March 2026 (~670k monthly downloads). Trojanised `_client.py` downloads steganographic payloads disguised as `.wav` files over plaintext HTTP, extracts the credential stealer, and persists. Windows variant drops `msbuild.exe` to the Startup folder; Linux variant uses a user-level systemd service. AES-256-CBC + RSA-4096 envelope for exfil.

  PyPI

  Affected packages1 package · 2 versions

  • PyPItelnyx
    4.87.14.87.2

  pypi-2026-03-27-telnyx-teampcpSource advisory
• Critical24 Mar 2026

  1 package tracked

  LiteLLM PyPI backdoored as TeamPCP cascade reaches Python

  TeamPCP used credentials harvested from the Trivy compromise to publish trojanised `litellm` 1.82.7 and 1.82.8 to PyPI on 24 March 2026 (~10:39 and 10:52 UTC). Malicious wheels drop a `litellm_init.pth` file in site-packages, executing a credential stealer at every Python interpreter start. PyPI quarantined the packages ~40 minutes after publication. Attackers later claimed ~500,000 credentials from this single compromise. LiteLLM averages ~3M daily downloads and ships in ~36% of cloud environments.

  PyPI

  Affected packages1 package · 2 versions

  • PyPIlitellm
    1.82.71.82.8

  pypi-2026-03-24-litellm-teampcpSource advisory
• High24 Mar 2026

  5 packages tracked

  5 npm typosquats target Solana + Ethereum dev libraries, exfil keys to Telegram

  npm publisher `galedonovan` shipped five typosquats of legitimate crypto libraries. Each transparently intercepts private keys passed through normal API calls (Base58 decoding for Solana, Wallet construction for Ethereum), exfiltrates them to a hardcoded Telegram bot, then returns the expected result so functionality looks normal.

  npm

  Affected packages5 packages · 4 versions

  • npmbase_xd
  • npmbase-x-64
    0.0.6
  • npmbs58-basic
    6.0.1
  • npmethersproject-wallet
    5.8.1
  • npmraydium-bs58
    1.9.7

  npm-2026-03-24-solana-ethereum-typosquatsSource advisory
• High23 Mar 2026

  2 packages tracked

  Checkmarx KICS GitHub Actions trojanised by TeamPCP

  Between 12:58 and 16:50 UTC on 23 March 2026, TeamPCP hijacked 35 tags in the Checkmarx `ast-github-action` and `kics-github-action` repos to push a credential stealer, leveraging tokens stolen from the Trivy compromise. CI/CD pipelines using either Action during the window executed the stealer before the legitimate scan.

  GitHub Actions

  Affected packages2 packages · 0 versions

  • GitHub Actionscheckmarx/ast-github-action
  • GitHub Actionscheckmarx/kics-github-action

  github-actions-2026-03-23-checkmarx-kicsSource advisory
• Critical20 Mar 2026

  29 packages tracked

  CanisterWorm: @emilgroup and @teale.io npm publisher compromise (29+ packages)

  An attacker compromised the @emilgroup and @teale.io npm namespaces, replacing 58 package-versions with a Python backdoor that polls an Internet Computer Protocol (ICP) canister for follow-on payloads. The implant persists via user-level systemd and includes worm-style republishing via deploy.js. Wiz later linked the tradecraft to TeamPCP; Socket declined firm attribution.

  npm

  Affected packages29 packages · 58 versions

  • npm@emilgroup/account-sdk
    1.41.11.41.2
  • npm@emilgroup/account-sdk-node
    1.40.11.40.2
  • npm@emilgroup/accounting-sdk-node
    1.26.11.26.2
  • npm@emilgroup/api-documentation
    1.19.11.19.2
  • npm@emilgroup/auth-sdk
    1.25.11.25.2
  • npm@emilgroup/auth-sdk-node
    1.21.11.21.2
  • npm@emilgroup/billing-sdk
    1.56.11.56.2
  • npm@emilgroup/billing-sdk-node
    1.57.11.57.2
  • npm@emilgroup/claim-sdk
    1.41.11.41.2
  • npm@emilgroup/claim-sdk-node
    1.39.11.39.2
  • npm@emilgroup/customer-sdk
    1.54.11.54.2
  • npm@emilgroup/customer-sdk-node
    1.55.11.55.2
  • npm@emilgroup/document-sdk
    1.45.11.45.2
  • npm@emilgroup/document-sdk-node
    1.43.11.43.2
  • npm@emilgroup/gdv-sdk
    2.6.12.6.2
  • npm@emilgroup/insurance-sdk
    1.97.11.97.2
  • npm@emilgroup/insurance-sdk-node
    1.95.11.95.2
  • npm@emilgroup/notification-sdk-node
    1.4.11.4.2
  • npm@emilgroup/partner-portal-sdk-node
    1.1.11.1.2
  • npm@emilgroup/partner-sdk-node
    1.19.11.19.2
  • npm@emilgroup/payment-sdk
    1.15.11.15.2
  • npm@emilgroup/payment-sdk-node
    1.23.11.23.2
  • npm@emilgroup/process-manager-sdk-node
    1.13.11.13.2
  • npm@emilgroup/public-api-sdk
    1.33.11.33.2
  • npm@emilgroup/public-api-sdk-node
    1.35.11.35.2
  • npm@emilgroup/tenant-sdk
    1.34.11.34.2
  • npm@emilgroup/tenant-sdk-node
    1.33.11.33.2
  • npm@emilgroup/translation-sdk-node
    1.1.11.1.2
  • npm@teale.io/eslint-config
    1.8.91.8.10

  npm-2026-03-20-canisterworm-emilgroup-tealeSource advisory
• Critical19 Mar 2026

  3 packages tracked

  Trivy GitHub Action + Docker images compromised — start of TeamPCP cascade

  Aqua Security's Trivy scanner was compromised on 19 March 2026 by the threat actor self-identifying as TeamPCP. The attacker force-pushed 76 of 77 tags in `aquasecurity/trivy-action` (only @0.35.0 survived) and all 7 tags in `aquasecurity/setup-trivy` to malicious commits, then published trojanised Trivy binary 0.69.4 + Docker images 0.69.5/0.69.6/latest. A stolen Argon-DevOps-Mgt service-account token seeded the downstream LiteLLM, Telnyx, Bitwarden CLI, and Checkmarx compromises.

  DockerGitHub Actions

  Affected packages3 packages · 4 versions

  • Dockeraquasec/trivy
    0.69.40.69.50.69.6latest
  • GitHub Actionsaquasecurity/setup-trivy
  • GitHub Actionsaquasecurity/trivy-action

  github-actions-2026-03-19-trivy-teampcp-cascadeSource advisory
• High18 Mar 2026

  2 packages tracked

  GlassWorm sleeper extensions activate on Open VSX

  Roughly 40 malicious VS Code extensions surfaced March 14-18, 2026: 20+ new extensions, ~20 previously dormant sleepers activated, plus 11 extensionPack droppers. The campaign hosts VSIX payloads on attacker-controlled GitHub releases to evade registry takedowns. Publishing accounts: `laura6909`, `martina0094`, `chiara585`, `francesca898`.

  Open VSX

  Affected packages2 packages · 3 versions

  • Open VSX96-studio.json-formatter
    0.0.20.0.4
  • Open VSXlauracode.wrap-selected-code
    0.0.2

  openvsx-2026-03-18-glassworm-sleeperSource advisory
• High13 Mar 2026

  Feed-only · no version-specific detection

  GlassWorm: 72+ Open VSX extensions weaponised via transitive loaders

  Socket linked at least 72 additional malicious Open VSX extensions to the GlassWorm campaign. Newer variants use `extensionPack` / `extensionDependencies` fields to transitively pull GlassWorm loaders rather than embedding malware directly. Obfuscation rotated to RC4 + base64 with keys delivered in HTTP response headers.

  openvsx-2026-03-13-glassworm-transitiveSource advisory
• Medium12 Mar 2026

  6 packages tracked

  6 malicious Packagist OphimCMS themes ship trojanised jQuery and FUNNULL redirects

  Six Composer packages from the `ophimcms` organisation posed as OphimCMS themes containing trojanised jQuery. The payload exfiltrates URLs, injects ads, and redirects mobile traffic via OFAC-sanctioned FUNNULL infrastructure. Combined ~2,750 installs.

  Packagist

  Affected packages6 packages · 6 versions

  • Packagistophimcms/theme-dy
    1.0.0
  • Packagistophimcms/theme-legend
    1.0.0
  • Packagistophimcms/theme-motchill
    1.0.0
  • Packagistophimcms/theme-mtyy
    1.0.0
  • Packagistophimcms/theme-pcc
    1.2.2
  • Packagistophimcms/theme-rrdyw
    1.0.0

  packagist-2026-03-12-ophimcms-themesSource advisory
• Medium28 Feb 2026

  5 packages tracked

  5 malicious Rust crates pose as time utilities to exfiltrate .env files

  Five crates published between late February and early March 2026 posed as local time utilities while exfiltrating .env files via `curl` to a lookalike domain `timeapis.io` (typosquatting `timeapi.io`). All packages were 0.1.0 and yanked within hours. Account aliases: `gehakax777`, `dictorudin`.

  crates.io

  Affected packages5 packages · 5 versions

  • crates.iochrono_anchor
    0.1.0
  • crates.iodnp3times
    0.1.0
  • crates.iotime_calibrator
    0.1.0
  • crates.iotime_calibrators
    0.1.0
  • crates.iotime-sync
    0.1.0

  crates-2026-02-28-time-utility-typosquatsSource advisory
• High27 Feb 2026

  26 packages tracked

  StegaBin: 26 npm typosquats use Pastebin steganography to deliver Contagious Interview RAT

  Socket disclosed 26 typosquatted npm packages tied to North Korea's Contagious Interview / FAMOUS CHOLLIMA cluster. The loader decodes steganographically-encoded Pastebin URLs to resolve C2 hosted across 31 Vercel deployments, then retrieves a 9-module infostealer and RAT toolkit.

  npm

  Affected packages26 packages · 26 versions

  • npmargonist
    0.41.0
  • npmbcryptance
    6.5.2
  • npmbee-quarl
    2.1.2
  • npmbubble-core
    6.26.2
  • npmcorstoken
    2.14.7
  • npmdaytonjs
    1.11.20
  • npmether-lint
    5.9.4
  • npmexpressjs-lint
    5.3.2
  • npmfastify-lint
    5.8.0
  • npmformmiderable
    3.5.7
  • npmhapi-lint
    19.1.2
  • npmiosysredis
    5.13.2
  • npmjslint-config
    10.22.2
  • npmjsnwebapptoken
    8.40.2
  • npmkafkajs-lint
    2.21.3
  • npmloadash-lint
    4.17.24
  • npmmqttoken
    5.40.2
  • npmprism-lint
    7.4.2
  • npmpromanage
    6.0.21
  • npmsequelization
    6.40.2
  • npmtyporiem
    0.4.17
  • npmundicy-lint
    7.23.1
  • npmuuindex
    13.1.0
  • npmvitetest-lint
    4.1.21
  • npmwindowston
    3.19.2
  • npmzoddle
    4.4.2

  npm-2026-02-27-stegabin-contagious-interviewSource advisory
• Critical20 Feb 2026

  19 packages tracked

  SANDWORM_MODE: 19 npm typosquats with self-spreading worm + AI toolchain poisoning

  Socket disclosed a Shai-Hulud-style self-propagating worm spread across at least 19 typosquatted npm packages from accounts `official334` and `javaorg`. It harvests CI secrets and crypto keys, propagates via stolen npm/GitHub tokens, and injects prompt-injection logic into MCP servers used by AI coding assistants.

  npm

  Affected packages19 packages · 19 versions

  • npmclaud-code
    0.2.1
  • npmcloude
    0.3.0
  • npmcloude-code
    0.2.1
  • npmcrypto-locale
    1.0.0
  • npmcrypto-reader-info
    1.0.0
  • npmdetect-cache
    1.0.0
  • npmformat-defaults
    1.0.0
  • npmhardhta
    1.0.0
  • npmlocale-loader-pro
    1.0.0
  • npmnaniod
    1.0.0
  • npmnode-native-bridge
    1.0.0
  • npmopencraw
    2026.2.17
  • npmparse-compat
    1.0.0
  • npmrimarf
    1.0.0
  • npmscan-store
    1.0.0
  • npmsecp256
    1.0.0
  • npmsuport-color
    1.0.1
  • npmveim
    2.46.2
  • npmyarsg
    18.0.1

  npm-2026-02-20-sandworm-modeSource advisory
• High17 Feb 2026

  1 package tracked

  cline npm package hijacked via "Clinejection" prompt-injection chain

  An attacker abused an unsanitised AI issue-triage GitHub Actions workflow on the Cline repo to poison the release pipeline cache and steal the npm publish token. They published `cline@2.3.0` with a postinstall script that globally installed the second-stage package `openclaw`. ~90k weekly downloads; live for ~8 hours before Cline rotated the token and shipped 2.4.0.

  npm

  Affected packages1 package · 1 version

  • npmcline
    2.3.0

  npm-2026-02-17-cline-clinejectionSource advisory
• High11 Feb 2026

  30 packages tracked

  Lazarus "graphalgo" fake-recruiter campaign (npm + PyPI)

  ReversingLabs attributed an ongoing fake-recruiter campaign (active since May 2025, reported Feb 2026) to North Korea's Lazarus Group (overlapping Jade Sleet / UNC4899). Crypto, JavaScript, and Python developers are lured via LinkedIn/Reddit/Facebook into interview "coding tasks" that pull a token-protected RAT loader from npm and PyPI. ~192 malicious packages attributed in total; bigmathutils alone passed 10,000 downloads.

  npmPyPI

  Affected packages30 packages · 44 versions

  • npmbigmathex
  • npmbigmathix
  • npmbigmathlib
  • npmbigmathutils
    1.0.01.1.0
  • npmbignumberx
  • npmbignumex
  • npmbignumx
  • PyPIbigpyx
  • npmgraphalgo
    2.2.5-pre2.2.62.2.72.2.82.2.92.2.102.2.11
  • PyPIgraphalgo-py
    3.5.1rc0.dev03.5.23.5.33.5.53.5.6
  • npmgraphchain
  • PyPIgraphdict
  • PyPIgraphex
    3.5.73.5.83.5.93.5.10
  • npmgraphflowx
  • npmgraphflux
  • npmgraphhub
  • npmgraphkitx
  • npmgraphlibcore
    2.2.62.2.72.2.82.2.92.2.102.2.11
  • PyPIgraphlibx
  • npmgraphnet
  • npmgraphnetworkx
    2.1.62.1.72.1.82.1.92.1.102.1.11
  • PyPIgraphnode
  • npmgraphorbit
  • npmgraphorithm
    2.2.62.2.72.2.82.2.9
  • npmgraphrix
  • npmgraphstruct
    2.2.62.2.72.2.8
  • PyPIgraphsync
  • npmnetstruct
    2.1.62.1.8
  • npmterminal-kleur
  • npmterminalcolor256
    2.0.22.0.32.1.02.2.02.2.6

  multi-2026-02-11-lazarus-graphalgoSource advisory
• Medium5 Feb 2026

  3 packages tracked

  Polymarket SDK typosquats on crates.io

  Three crates impersonating `polymarket-client-sdk` were published between 5 and 19 February 2026 and exfiltrated local credential files. The malicious crates were yanked and publisher accounts disabled. Combined downloads stayed under 100, but targeting was high-value (Polymarket / Web3 developers).

  crates.io

  Affected packages3 packages · 0 versions

  • crates.iopolymarket-client-sdks
  • crates.iopolymarket-clients-sdk
  • crates.iopolymarkets-client-sdk

  crates-2026-02-05-polymarket-typosquatsSource advisory
• Critical27 Jan 2026

  2 packages tracked

  dYdX v4-client npm + PyPI compromise (wallet stealer + RAT)

  Maintainer credentials for the dYdX decentralized exchange were compromised; malicious versions of the official v4 client were pushed to npm and PyPI in a coordinated release. The npm payload exfiltrates wallet seed phrases through a malicious `createRegistry()` function. The PyPI variant additionally drops a Python RAT executed on import.

  npmPyPI

  Affected packages2 packages · 6 versions

  • npm@dydxprotocol/v4-client-js
    1.0.311.15.21.22.13.4.1
  • PyPIdydx-v4-client
    1.1.5.post11.1.5post1

  multi-2026-01-27-dydx-compromiseSource advisory
• High17 Jan 2026

  1 package tracked

  sympy-dev PyPI typosquat delivering XMRig cryptominer

  A PyPI typosquat of SymPy was published by the account "Nanit" across four versions on Jan 17, 2026. It fetches a remote JSON config, downloads an ELF, and executes it from a memfd to evade disk-based detection. The payload is XMRig mining Monero on infected developer workstations.

  PyPI

  Affected packages1 package · 4 versions

  • PyPIsympy-dev
    1.2.31.2.41.2.51.2.6

  pypi-2026-01-17-sympy-dev-minerSource advisory
• Critical15 Sept 2025

  197 packages tracked

  Original Shai-Hulud npm worm

  First successful self-propagating worm in the npm ecosystem. Downstream of the August 2025 s1ngularity/Nx GitHub-token theft. The postinstall hook ran TruffleHog to harvest secrets, opened public GitHub repos named "Shai-Hulud" to publish them, force-converted private repos to public with a "-migration" suffix, and used stolen npm tokens to publish malicious versions of any package the maintainer could access. ~180 unique packages compromised across 300+ versions, including CrowdStrike's own scope (@crowdstrike/*).

  npm

  Affected packages197 packages · 509 versions

  • npm@ahmedhfarag/ngx-perfect-scrollbar
    20.0.20
  • npm@ahmedhfarag/ngx-virtual-scroller
    4.0.4
  • npm@art-ws/common
    2.0.28
  • npm@art-ws/config-eslint
    2.0.42.0.5
  • npm@art-ws/config-ts
    2.0.72.0.8
  • npm@art-ws/db-context
    2.0.24
  • npm@art-ws/di
    2.0.282.0.32
  • npm@art-ws/di-node
    2.0.13
  • npm@art-ws/eslint
    1.0.51.0.6
  • npm@art-ws/fastify-http-server
    2.0.242.0.27
  • npm@art-ws/http-server
    2.0.212.0.25
  • npm@art-ws/openapi
    0.1.90.1.12
  • npm@art-ws/package-base
    1.0.51.0.6
  • npm@art-ws/prettier
    1.0.51.0.6
  • npm@art-ws/slf
    2.0.152.0.22
  • npm@art-ws/ssl-info
    1.0.91.0.10
  • npm@art-ws/web-app
    1.0.31.0.4
  • npm@basic-ui-components-stc/basic-ui-components
    1.0.5
  • npm@crowdstrike/commitlint
    8.1.18.1.2
  • npm@crowdstrike/falcon-shoelace
    0.4.10.4.2
  • npm@crowdstrike/foundry-js
    0.19.10.19.2
  • npm@crowdstrike/glide-core
    0.34.20.34.3
  • npm@crowdstrike/logscale-dashboard
    1.205.11.205.2
  • npm@crowdstrike/logscale-file-editor
    1.205.11.205.2
  • npm@crowdstrike/logscale-parser-edit
    1.205.11.205.2
  • npm@crowdstrike/logscale-search
    1.205.11.205.2
  • npm@crowdstrike/tailwind-toucan-base
    5.0.15.0.2
  • npm@ctrl/deluge
    7.2.17.2.2
  • npm@ctrl/golang-template
    1.4.21.4.3
  • npm@ctrl/magnet-link
    4.0.34.0.4
  • npm@ctrl/ngx-codemirror
    7.0.17.0.2
  • npm@ctrl/ngx-csv
    6.0.16.0.2
  • npm@ctrl/ngx-emoji-mart
    9.2.19.2.2
  • npm@ctrl/ngx-rightclick
    4.0.14.0.2
  • npm@ctrl/qbittorrent
    9.7.19.7.2
  • npm@ctrl/react-adsense
    2.0.12.0.2
  • npm@ctrl/shared-torrent
    6.3.16.3.2
  • npm@ctrl/tinycolor
    4.1.14.1.2
  • npm@ctrl/torrent-file
    4.1.14.1.2
  • npm@ctrl/transmission
    7.3.1
  • npm@ctrl/ts-base32
    4.0.14.0.2
  • npm@hestjs/core
    0.2.1
  • npm@hestjs/cqrs
    0.1.6
  • npm@hestjs/demo
    0.1.2
  • npm@hestjs/eslint-config
    0.1.2
  • npm@hestjs/logger
    0.1.6
  • npm@hestjs/scalar
    0.1.7
  • npm@hestjs/validation
    0.1.6
  • npm@nativescript-community/arraybuffers
    1.1.61.1.71.1.8
  • npm@nativescript-community/gesturehandler
    2.0.35
  • npm@nativescript-community/perms
    3.0.53.0.63.0.73.0.83.0.9
  • npm@nativescript-community/sentry
    4.6.43
  • npm@nativescript-community/sqlite
    3.5.23.5.33.5.43.5.5
  • npm@nativescript-community/text
    1.6.91.6.101.6.111.6.121.6.13
  • npm@nativescript-community/typeorm
    0.2.300.2.310.2.320.2.33
  • npm@nativescript-community/ui-collectionview
    6.0.6
  • npm@nativescript-community/ui-document-picker
    1.1.271.1.2813.0.32
  • npm@nativescript-community/ui-drawer
    0.1.30
  • npm@nativescript-community/ui-image
    4.5.6
  • npm@nativescript-community/ui-label
    1.3.351.3.361.3.37
  • npm@nativescript-community/ui-material-bottom-navigation
    7.2.727.2.737.2.747.2.75
  • npm@nativescript-community/ui-material-bottomsheet
    7.2.72
  • npm@nativescript-community/ui-material-core
    7.2.727.2.737.2.747.2.757.2.76
  • npm@nativescript-community/ui-material-core-tabs
    7.2.727.2.737.2.747.2.757.2.76
  • npm@nativescript-community/ui-material-ripple
    7.2.727.2.737.2.747.2.75
  • npm@nativescript-community/ui-material-tabs
    7.2.727.2.737.2.747.2.75
  • npm@nativescript-community/ui-pager
    14.1.3614.1.3714.1.38
  • npm@nativescript-community/ui-pulltorefresh
    2.5.42.5.52.5.62.5.7
  • npm@nexe/config-manager
    0.1.1
  • npm@nexe/eslint-config
    0.1.1
  • npm@nexe/logger
    0.1.3
  • npm@nstudio/angular
    20.0.420.0.520.0.6
  • npm@nstudio/focus
    20.0.420.0.520.0.6
  • npm@nstudio/nativescript-checkbox
    2.0.62.0.72.0.82.0.9
  • npm@nstudio/nativescript-loading-indicator
    5.0.15.0.25.0.35.0.4
  • npm@nstudio/ui-collectionview
    5.1.115.1.125.1.135.1.14
  • npm@nstudio/web
    20.0.4
  • npm@nstudio/web-angular
    20.0.4
  • npm@nstudio/xplat
    20.0.520.0.620.0.7
  • npm@nstudio/xplat-utils
    20.0.520.0.620.0.7
  • npm@operato/board
    9.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
  • npm@operato/data-grist
    9.0.299.0.359.0.369.0.37
  • npm@operato/graphql
    9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
  • npm@operato/headroom
    9.0.29.0.359.0.369.0.37
  • npm@operato/help
    9.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
  • npm@operato/i18n
    9.0.359.0.369.0.37
  • npm@operato/input
    9.0.279.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.479.0.48
  • npm@operato/layout
    9.0.359.0.369.0.37
  • npm@operato/popup
    9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.49
  • npm@operato/pull-to-refresh
    9.0.369.0.379.0.389.0.399.0.409.0.419.0.42
  • npm@operato/shell
    9.0.229.0.359.0.369.0.379.0.389.0.39
  • npm@operato/styles
    9.0.29.0.359.0.369.0.37
  • npm@operato/utils
    9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.49
  • npm@teselagen/bio-parsers
    0.4.290.4.30
  • npm@teselagen/bounce-loader
    0.3.160.3.17
  • npm@teselagen/file-utils
    0.3.210.3.22
  • npm@teselagen/liquibase-tools
    0.4.1
  • npm@teselagen/ove
    0.7.390.7.40
  • npm@teselagen/range-utils
    0.3.140.3.15
  • npm@teselagen/react-list
    0.8.190.8.20
  • npm@teselagen/react-table
    6.10.196.10.206.10.216.10.22
  • npm@teselagen/sequence-utils
    0.3.330.3.34
  • npm@teselagen/ui
    0.9.90.9.10
  • npm@thangved/callback-window
    1.1.4
  • npm@things-factory/attachment-base
    9.0.429.0.439.0.449.0.459.0.469.0.479.0.489.0.499.0.509.0.519.0.529.0.539.0.549.0.55
  • npm@things-factory/auth-base
    9.0.429.0.439.0.449.0.45
  • npm@things-factory/email-base
    9.0.429.0.439.0.449.0.459.0.469.0.479.0.489.0.499.0.509.0.519.0.529.0.539.0.549.0.559.0.569.0.579.0.589.0.59
  • npm@things-factory/env
    9.0.429.0.439.0.449.0.45
  • npm@things-factory/integration-base
    9.0.429.0.439.0.449.0.45
  • npm@things-factory/integration-marketplace
    9.0.429.0.439.0.449.0.45
  • npm@things-factory/shell
    9.0.429.0.439.0.449.0.45
  • npm@tnf-dev/api
    1.0.8
  • npm@tnf-dev/core
    1.0.8
  • npm@tnf-dev/js
    1.0.8
  • npm@tnf-dev/mui
    1.0.8
  • npm@tnf-dev/react
    1.0.8
  • npm@ui-ux-gang/devextreme-angular-rpk
    24.1.7
  • npm@yoobic/design-system
    6.5.17
  • npm@yoobic/jpeg-camera-es6
    1.0.13
  • npm@yoobic/yobi
    8.7.53
  • npmairchief
    0.3.1
  • npmairpilot
    0.8.8
  • npmangulartics2
    14.1.114.1.2
  • npmbrowser-webdriver-downloader
    3.0.8
  • npmcapacitor-notificationhandler
    0.0.20.0.3
  • npmcapacitor-plugin-healthapp
    0.0.20.0.3
  • npmcapacitor-plugin-ihealth
    1.1.81.1.9
  • npmcapacitor-plugin-vonage
    1.0.21.0.3
  • npmcapacitorandroidpermissions
    0.0.40.0.5
  • npmconfig-cordova
    0.8.5
  • npmcordova-plugin-voxeet2
    1.0.24
  • npmcordova-voxeet
    1.0.32
  • npmcreate-hest-app
    0.1.9
  • npmdb-evo
    1.1.41.1.5
  • npmdevextreme-angular-rpk
    21.2.8
  • npmdevextreme-rpk
    21.2.8
  • npmember-browser-services
    5.0.25.0.3
  • npmember-headless-form
    1.1.21.1.3
  • npmember-headless-form-yup
    1.0.1
  • npmember-headless-table
    2.1.52.1.6
  • npmember-url-hash-polyfill
    1.0.121.0.13
  • npmember-velcro
    2.2.12.2.2
  • npmencounter-playground
    0.0.20.0.30.0.40.0.5
  • npmeslint-config-crowdstrike
    11.0.211.0.3
  • npmeslint-config-crowdstrike-node
    4.0.34.0.4
  • npmeslint-config-teselagen
    6.1.76.1.8
  • npmglobalize-rpk
    1.7.4
  • npmgraphql-sequelize-teselagen
    5.3.85.3.9
  • npmhtml-to-base64-image
    1.0.2
  • npmjson-rules-engine-simplified
    0.2.10.2.30.2.4
  • npmjumpgate
    0.0.2
  • npmkoa2-swagger-ui
    5.11.15.11.2
  • npmmcfly-semantic-release
    1.3.1
  • npmmcp-knowledge-base
    0.0.2
  • npmmcp-knowledge-graph
    1.2.1
  • npmmobioffice-cli
    1.0.3
  • npmmonorepo-next
    13.0.113.0.2
  • npmmstate-angular
    0.4.4
  • npmmstate-cli
    0.4.7
  • npmmstate-dev-react
    1.1.1
  • npmmstate-react
    1.6.5
  • npmng2-file-upload
    7.0.27.0.38.0.18.0.28.0.39.0.1
  • npmngx-bootstrap
    18.1.419.0.319.0.420.0.320.0.420.0.520.0.6
  • npmngx-color
    10.0.110.0.2
  • npmngx-toastr
    19.0.119.0.2
  • npmngx-trend
    8.0.1
  • npmngx-ws
    1.1.51.1.6
  • npmoradm-to-gql
    35.0.1435.0.15
  • npmoradm-to-sqlz
    1.1.21.1.4
  • npmove-auto-annotate
    0.0.90.0.10
  • npmpm2-gelf-json
    1.0.41.0.5
  • npmprintjs-rpk
    1.6.1
  • npmreact-complaint-image
    0.0.320.0.340.0.35
  • npmreact-jsonschema-form-conditionals
    0.3.180.3.200.3.21
  • npmreact-jsonschema-form-extras
    1.0.31.0.4
  • npmreact-jsonschema-rxnt-extras
    0.4.80.4.9
  • npmremark-preset-lint-crowdstrike
    4.0.14.0.2
  • npmrxnt-authentication
    0.0.30.0.40.0.50.0.6
  • npmrxnt-healthchecks-nestjs
    1.0.21.0.31.0.41.0.5
  • npmrxnt-kue
    1.0.41.0.51.0.61.0.7
  • npmswc-plugin-component-annotate
    1.9.11.9.2
  • npmtbssnch
    1.0.2
  • npmteselagen-interval-tree
    1.1.2
  • npmtg-client-query-builder
    2.14.42.14.5
  • npmtg-redbird
    1.3.11.3.2
  • npmtg-seq-gen
    1.0.91.0.10
  • npmthangved-react-grid
    1.0.3
  • npmts-gaussian
    3.0.53.0.6
  • npmts-imports
    1.0.11.0.2
  • npmtvi-cli
    0.1.5
  • npmve-bamreader
    0.2.60.2.7
  • npmve-editor
    1.0.11.0.2
  • npmverror-extra
    6.0.1
  • npmvoip-callkit
    1.0.21.0.3
  • npmwdio-web-reporter
    0.1.3
  • npmyargs-help-output
    5.0.3
  • npmyoo-styles
    6.0.326

  npm-2025-09-shai-hulud-originalSource advisory

Sources cited per card. We only list package versions named by the original advisory; we don't infer compromises. Missing something? Send it in.