Shai-Hulud 2.0 Malicious NPM Package Installation - Linux
Detects the command-line installation of specific malicious npm packages and versions associated with the Shai-Hulud 2.0 supply chain attack.
Sigma rule (View on GitHub)
1title: Shai-Hulud 2.0 Malicious NPM Package Installation - Linux
2id: 514f533b-f56e-421d-80b0-f7706a3e9d23
3related:
4 - id: bae7c70b-8569-44e9-accf-b30073da8a5d
5 type: similar
6status: experimental
7description: |
8 Detects the command-line installation of specific malicious npm packages and versions associated with the Shai-Hulud 2.0 supply chain attack.
9references:
10 - https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack
11 - https://github.com/wiz-sec-public/wiz-research-iocs/blob/a836ce8aacf12d6d2f6afc3c44b391dc4c08f46e/reports/shai-hulud-2-packages.csv
12author: Swachchhanda Shrawan Poudel (Nextron Systems)
13date: 2025-11-28
14tags:
15 - attack.initial-access
16 - attack.execution
17 - attack.t1195.002
18 - detection.emerging-threats
19logsource:
20 category: process_creation
21 product: linux
22detection:
23 selection_img:
24 Image|endswith: '\node'
25 CommandLine|contains:
26 - 'install'
27 - ' i '
28 # List of known malicious packages and versions from the Shai-Hulud 2.0 campaign
29 selection_packages:
30 CommandLine|contains:
31 - '02-echo@0.0.7'
32 - '@accordproject/concerto-analysis@3.24.1'
33 - '@accordproject/concerto-linter@3.24.1'
34 - '@accordproject/concerto-linter-default-ruleset@3.24.1'
35 - '@accordproject/concerto-metamodel@3.12.5'
36 - '@accordproject/concerto-types@3.24.1'
37 - '@accordproject/markdown-it-cicero@0.16.26'
38 - '@accordproject/template-engine@2.7.2'
39 - '@actbase/css-to-react-native-transform@1.0.3'
40 - '@actbase/native@0.1.32'
41 - '@actbase/node-server@1.1.19'
42 - '@actbase/react-absolute@0.8.3'
43 - '@actbase/react-daum-postcode@1.0.5'
44 - '@actbase/react-kakaosdk@0.9.27'
45 - '@actbase/react-native-actionsheet@1.0.3'
46 - '@actbase/react-native-devtools@0.1.3'
47 - '@actbase/react-native-fast-image@8.5.13'
48 - '@actbase/react-native-kakao-channel@1.0.2'
49 - '@actbase/react-native-kakao-navi@2.0.4'
50 - '@actbase/react-native-less-transformer@1.0.6'
51 - '@actbase/react-native-naver-login@1.0.1'
52 - '@actbase/react-native-simple-video@1.0.13'
53 - '@actbase/react-native-tiktok@1.1.3'
54 - '@afetcan/api@0.0.13'
55 - '@afetcan/storage@0.0.27'
56 - '@alaan/s2s-auth@2.0.3'
57 - '@alexadark/amadeus-api@1.0.4'
58 - '@alexadark/gatsby-theme-events@1.0.1'
59 - '@alexadark/gatsby-theme-wordpress-blog@2.0.1'
60 - '@alexadark/reusable-functions@1.5.1'
61 - '@alexcolls/nuxt-socket.io@0.0.7'
62 - '@alexcolls/nuxt-socket.io@0.0.8'
63 - '@alexcolls/nuxt-ux@0.6.1'
64 - '@alexcolls/nuxt-ux@0.6.2'
65 - '@antstackio/eslint-config-antstack@0.0.3'
66 - '@antstackio/express-graphql-proxy@0.2.8'
67 - '@antstackio/graphql-body-parser@0.1.1'
68 - '@antstackio/json-to-graphql@1.0.3'
69 - '@antstackio/shelbysam@1.1.7'
70 - '@aryanhussain/my-angular-lib@0.0.23'
71 - '@asyncapi/avro-schema-parser@3.0.25'
72 - '@asyncapi/avro-schema-parser@3.0.26'
73 - '@asyncapi/bundler@0.6.5'
74 - '@asyncapi/bundler@0.6.6'
75 - '@asyncapi/cli@4.1.2'
76 - '@asyncapi/cli@4.1.3'
77 - '@asyncapi/converter@1.6.3'
78 - '@asyncapi/converter@1.6.4'
79 - '@asyncapi/diff@0.5.1'
80 - '@asyncapi/diff@0.5.2'
81 - '@asyncapi/dotnet-rabbitmq-template@1.0.1'
82 - '@asyncapi/dotnet-rabbitmq-template@1.0.2'
83 - '@asyncapi/edavisualiser@1.2.1'
84 - '@asyncapi/edavisualiser@1.2.2'
85 - '@asyncapi/generator-components@0.3.2'
86 - '@asyncapi/generator-components@0.3.3'
87 - '@asyncapi/generator-react-sdk@1.1.4'
88 - '@asyncapi/generator-react-sdk@1.1.5'
89 - '@asyncapi/generator@2.8.5'
90 - '@asyncapi/generator@2.8.6'
91 - '@asyncapi/go-watermill-template@0.2.76'
92 - '@asyncapi/go-watermill-template@0.2.77'
93 - '@asyncapi/html-template@3.3.2'
94 - '@asyncapi/html-template@3.3.3'
95 - '@asyncapi/java-spring-cloud-stream-template@0.13.5'
96 - '@asyncapi/java-spring-cloud-stream-template@0.13.6'
97 - '@asyncapi/java-spring-template@1.6.1'
98 - '@asyncapi/java-spring-template@1.6.2'
99 - '@asyncapi/java-template@0.3.5'
100 - '@asyncapi/java-template@0.3.6'
101 - '@asyncapi/keeper@0.0.2'
102 - '@asyncapi/keeper@0.0.3'
103 - '@asyncapi/markdown-template@1.6.8'
104 - '@asyncapi/markdown-template@1.6.9'
105 - '@asyncapi/modelina-cli@5.10.2'
106 - '@asyncapi/modelina-cli@5.10.3'
107 - '@asyncapi/modelina@5.10.2'
108 - '@asyncapi/modelina@5.10.3'
109 - '@asyncapi/multi-parser@2.2.1'
110 - '@asyncapi/multi-parser@2.2.2'
111 - '@asyncapi/nodejs-template@3.0.5'
112 - '@asyncapi/nodejs-template@3.0.6'
113 - '@asyncapi/nodejs-ws-template@0.10.1'
114 - '@asyncapi/nodejs-ws-template@0.10.2'
115 - '@asyncapi/nunjucks-filters@2.1.1'
116 - '@asyncapi/nunjucks-filters@2.1.2'
117 - '@asyncapi/openapi-schema-parser@3.0.25'
118 - '@asyncapi/openapi-schema-parser@3.0.26'
119 - '@asyncapi/optimizer@1.0.5'
120 - '@asyncapi/optimizer@1.0.6'
121 - '@asyncapi/parser@3.4.1'
122 - '@asyncapi/parser@3.4.2'
123 - '@asyncapi/php-template@0.1.1'
124 - '@asyncapi/php-template@0.1.2'
125 - '@asyncapi/problem@1.0.1'
126 - '@asyncapi/problem@1.0.2'
127 - '@asyncapi/protobuf-schema-parser@3.5.2'
128 - '@asyncapi/protobuf-schema-parser@3.5.3'
129 - '@asyncapi/protobuf-schema-parser@3.6.1'
130 - '@asyncapi/python-paho-template@0.2.14'
131 - '@asyncapi/python-paho-template@0.2.15'
132 - '@asyncapi/react-component@2.6.6'
133 - '@asyncapi/react-component@2.6.7'
134 - '@asyncapi/server-api@0.16.24'
135 - '@asyncapi/server-api@0.16.25'
136 - '@asyncapi/specs@6.10.1'
137 - '@asyncapi/specs@6.8.2'
138 - '@asyncapi/specs@6.8.3'
139 - '@asyncapi/specs@6.9.1'
140 - '@asyncapi/studio@1.0.2'
141 - '@asyncapi/studio@1.0.3'
142 - '@asyncapi/web-component@2.6.6'
143 - '@asyncapi/web-component@2.6.7'
144 - '@bdkinc/knex-ibmi@0.5.7'
145 - '@browserbasehq/bb9@1.2.21'
146 - '@browserbasehq/director-ai@1.0.3'
147 - '@browserbasehq/mcp-server-browserbase@2.4.2'
148 - '@browserbasehq/mcp@2.1.1'
149 - '@browserbasehq/sdk-functions@0.0.4'
150 - '@browserbasehq/stagehand-docs@1.0.1'
151 - '@browserbasehq/stagehand@3.0.4'
152 - '@caretive/caret-cli@0.0.2'
153 - '@chtijs/eslint-config@1.0.1'
154 - '@clausehq/flows-step-httprequest@0.1.14'
155 - '@clausehq/flows-step-jsontoxml@0.1.14'
156 - '@clausehq/flows-step-mqtt@0.1.14'
157 - '@clausehq/flows-step-sendgridemail@0.1.14'
158 - '@clausehq/flows-step-taskscreateurl@0.1.14'
159 - '@cllbk/ghl@1.3.1'
160 - '@commute/bloom@1.0.3'
161 - '@commute/market-data-chartjs@2.3.1'
162 - '@commute/market-data@1.0.2'
163 - '@dev-blinq/ai-qa-logic@1.0.19'
164 - '@dev-blinq/blinqioclient@1.0.21'
165 - '@dev-blinq/cucumber-js@1.0.131'
166 - '@dev-blinq/cucumber_client@1.0.738'
167 - '@dev-blinq/ui-systems@1.0.93'
168 - '@elsedev/react-csr-sdk@0.2.2'
169 - '@ensdomains/address-encoder@1.1.5'
170 - '@ensdomains/blacklist@1.0.1'
171 - '@ensdomains/buffer@0.1.2'
172 - '@ensdomains/ccip-read-cf-worker@0.0.4'
173 - '@ensdomains/ccip-read-dns-gateway@0.1.1'
174 - '@ensdomains/ccip-read-router@0.0.7'
175 - '@ensdomains/ccip-read-worker-viem@0.0.4'
176 - '@ensdomains/content-hash@3.0.1'
177 - '@ensdomains/curvearithmetics@1.0.1'
178 - '@ensdomains/cypress-metamask@1.2.1'
179 - '@ensdomains/dnsprovejs@0.5.3'
180 - '@ensdomains/dnssec-oracle-anchors@0.0.2'
181 - '@ensdomains/dnssecoraclejs@0.2.9'
182 - '@ensdomains/durin-middleware@0.0.2'
183 - '@ensdomains/durin@0.1.2'
184 - '@ensdomains/ens-archived-contracts@0.0.3'
185 - '@ensdomains/ens-avatar@1.0.4'
186 - '@ensdomains/ens-contracts@1.6.1'
187 - '@ensdomains/ens-test-env@1.0.2'
188 - '@ensdomains/ens-validation@0.1.1'
189 - '@ensdomains/ensjs-react@0.0.5'
190 - '@ensdomains/ensjs@4.0.3'
191 - '@ensdomains/eth-ens-namehash@2.0.16'
192 - '@ensdomains/hackathon-registrar@1.0.5'
193 - '@ensdomains/hardhat-chai-matchers-viem@0.1.15'
194 - '@ensdomains/hardhat-toolbox-viem-extended@0.0.6'
195 - '@ensdomains/mock@2.1.52'
196 - '@ensdomains/name-wrapper@1.0.1'
197 - '@ensdomains/offchain-resolver-contracts@0.2.2'
198 - '@ensdomains/op-resolver-contracts@0.0.2'
199 - '@ensdomains/react-ens-address@0.0.32'
200 - '@ensdomains/renewal-widget@0.1.10'
201 - '@ensdomains/renewal@0.0.13'
202 - '@ensdomains/reverse-records@1.0.1'
203 - '@ensdomains/server-analytics@0.0.2'
204 - '@ensdomains/solsha1@0.0.4'
205 - '@ensdomains/subdomain-registrar@0.2.4'
206 - '@ensdomains/test-utils@1.3.1'
207 - '@ensdomains/thorin@0.6.51'
208 - '@ensdomains/ui@3.4.6'
209 - '@ensdomains/unicode-confusables@0.1.1'
210 - '@ensdomains/unruggable-gateways@0.0.3'
211 - '@ensdomains/vite-plugin-i18next-loader@4.0.4'
212 - '@ensdomains/web3modal@1.10.2'
213 - '@everreal/react-charts@2.0.1'
214 - '@everreal/react-charts@2.0.2'
215 - '@everreal/validate-esmoduleinterop-imports@1.4.4'
216 - '@everreal/validate-esmoduleinterop-imports@1.4.5'
217 - '@everreal/web-analytics@0.0.1'
218 - '@everreal/web-analytics@0.0.2'
219 - '@faq-component/core@0.0.4'
220 - '@faq-component/react@1.0.1'
221 - '@fishingbooker/browser-sync-plugin@1.0.5'
222 - '@fishingbooker/react-loader@1.0.7'
223 - '@fishingbooker/react-pagination@2.0.6'
224 - '@fishingbooker/react-raty@2.0.1'
225 - '@fishingbooker/react-swiper@0.1.5'
226 - '@hapheus/n8n-nodes-pgp@1.5.1'
227 - '@hover-design/core@0.0.1'
228 - '@hover-design/react@0.2.1'
229 - '@huntersofbook/auth-vue@0.4.2'
230 - '@huntersofbook/core-nuxt@0.4.2'
231 - '@huntersofbook/core@0.5.1'
232 - '@huntersofbook/form-naiveui@0.5.1'
233 - '@huntersofbook/i18n@0.8.2'
234 - '@huntersofbook/ui@0.5.1'
235 - '@hyperlook/telemetry-sdk@1.0.19'
236 - '@ifelsedeveloper/protocol-contracts-svm-idl@0.1.2'
237 - '@ifelsedeveloper/protocol-contracts-svm-idl@0.1.3'
238 - '@ifings/design-system@4.9.2'
239 - '@ifings/metatron3@0.1.5'
240 - '@jayeshsadhwani/telemetry-sdk@1.0.14'
241 - '@kvytech/cli@0.0.7'
242 - '@kvytech/components@0.0.2'
243 - '@kvytech/habbit-e2e-test@0.0.2'
244 - '@kvytech/medusa-plugin-announcement@0.0.8'
245 - '@kvytech/medusa-plugin-management@0.0.5'
246 - '@kvytech/medusa-plugin-newsletter@0.0.5'
247 - '@kvytech/medusa-plugin-product-reviews@0.0.9'
248 - '@kvytech/medusa-plugin-promotion@0.0.2'
249 - '@kvytech/web@0.0.2'
250 - '@lessondesk/api-client@9.12.2'
251 - '@lessondesk/api-client@9.12.3'
252 - '@lessondesk/babel-preset@1.0.1'
253 - '@lessondesk/electron-group-api-client@1.0.3'
254 - '@lessondesk/eslint-config@1.4.2'
255 - '@lessondesk/material-icons@1.0.3'
256 - '@lessondesk/react-table-context@2.0.4'
257 - '@lessondesk/schoolbus@5.2.2'
258 - '@lessondesk/schoolbus@5.2.3'
259 - '@livecms/live-edit@0.0.32'
260 - '@livecms/nuxt-live-edit@1.9.2'
261 - '@lokeswari-satyanarayanan/rn-zustand-expo-template@1.0.9'
262 - '@louisle2/core@1.0.1'
263 - '@louisle2/cortex-js@0.1.6'
264 - '@lpdjs/firestore-repo-service@1.0.1'
265 - '@lui-ui/lui-nuxt@0.1.1'
266 - '@lui-ui/lui-tailwindcss@0.1.2'
267 - '@lui-ui/lui-vue@1.0.13'
268 - '@markvivanco/app-version-checker@1.0.1'
269 - '@markvivanco/app-version-checker@1.0.2'
270 - '@mcp-use/cli@2.2.6'
271 - '@mcp-use/cli@2.2.7'
272 - '@mcp-use/inspector@0.6.2'
273 - '@mcp-use/inspector@0.6.3'
274 - '@mcp-use/mcp-use@1.0.1'
275 - '@mcp-use/mcp-use@1.0.2'
276 - '@micado-digital/stadtmarketing-kufstein-external@1.9.1'
277 - '@mizzle-dev/orm@0.0.2'
278 - '@mparpaillon/connector-parse@1.0.1'
279 - '@mparpaillon/imagesloaded@4.1.2'
280 - '@mparpaillon/page@1.0.1'
281 - '@ntnx/passport-wso2@0.0.3'
282 - '@ntnx/t@0.0.101'
283 - '@oku-ui/accordion@0.6.2'
284 - '@oku-ui/alert-dialog@0.6.2'
285 - '@oku-ui/arrow@0.6.2'
286 - '@oku-ui/aspect-ratio@0.6.2'
287 - '@oku-ui/avatar@0.6.2'
288 - '@oku-ui/checkbox@0.6.3'
289 - '@oku-ui/collapsible@0.6.2'
290 - '@oku-ui/collection@0.6.2'
291 - '@oku-ui/dialog@0.6.2'
292 - '@oku-ui/direction@0.6.2'
293 - '@oku-ui/dismissable-layer@0.6.2'
294 - '@oku-ui/focus-guards@0.6.2'
295 - '@oku-ui/focus-scope@0.6.2'
296 - '@oku-ui/hover-card@0.6.2'
297 - '@oku-ui/label@0.6.2'
298 - '@oku-ui/menu@0.6.2'
299 - '@oku-ui/motion-nuxt@0.2.2'
300 - '@oku-ui/motion@0.4.4'
301 - '@oku-ui/popover@0.6.2'
302 - '@oku-ui/popper@0.6.2'
303 - '@oku-ui/portal@0.6.2'
304 - '@oku-ui/presence@0.6.2'
305 - '@oku-ui/primitive@0.6.2'
306 - '@oku-ui/primitives-nuxt@0.3.1'
307 - '@oku-ui/primitives@0.7.9'
308 - '@oku-ui/progress@0.6.2'
309 - '@oku-ui/provide@0.6.2'
310 - '@oku-ui/radio-group@0.6.2'
311 - '@oku-ui/roving-focus@0.6.2'
312 - '@oku-ui/scroll-area@0.6.2'
313 - '@oku-ui/separator@0.6.2'
314 - '@oku-ui/slider@0.6.2'
315 - '@oku-ui/slot@0.6.2'
316 - '@oku-ui/switch@0.6.2'
317 - '@oku-ui/tabs@0.6.2'
318 - '@oku-ui/toast@0.6.2'
319 - '@oku-ui/toggle-group@0.6.2'
320 - '@oku-ui/toggle@0.6.2'
321 - '@oku-ui/toolbar@0.6.2'
322 - '@oku-ui/tooltip@0.6.2'
323 - '@oku-ui/use-composable@0.6.2'
324 - '@oku-ui/utils@0.6.2'
325 - '@oku-ui/visually-hidden@0.6.2'
326 - '@orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode@2.0.5'
327 - '@orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode@1.1.1'
328 - '@orbitgtbelgium/orbit-components@1.2.9'
329 - '@orbitgtbelgium/time-slider@1.0.187'
330 - '@osmanekrem/bmad@1.0.6'
331 - '@osmanekrem/error-handler@1.2.2'
332 - '@pergel/cli@0.11.1'
333 - '@pergel/module-box@0.6.1'
334 - '@pergel/module-graphql@0.6.1'
335 - '@pergel/module-ui@0.0.9'
336 - '@pergel/nuxt@0.25.5'
337 - '@posthog/agent@1.24.1'
338 - '@posthog/ai@7.1.2'
339 - '@posthog/automatic-cohorts-plugin@0.0.8'
340 - '@posthog/bitbucket-release-tracker@0.0.8'
341 - '@posthog/cli@0.5.15'
342 - '@posthog/clickhouse@1.7.1'
343 - '@posthog/core@1.5.6'
344 - '@posthog/currency-normalization-plugin@0.0.8'
345 - '@posthog/customerio-plugin@0.0.8'
346 - '@posthog/databricks-plugin@0.0.8'
347 - '@posthog/drop-events-on-property-plugin@0.0.8'
348 - '@posthog/event-sequence-timer-plugin@0.0.8'
349 - '@posthog/filter-out-plugin@0.0.8'
350 - '@posthog/first-time-event-tracker@0.0.8'
351 - '@posthog/geoip-plugin@0.0.8'
352 - '@posthog/github-release-tracking-plugin@0.0.8'
353 - '@posthog/gitub-star-sync-plugin@0.0.8'
354 - '@posthog/heartbeat-plugin@0.0.8'
355 - '@posthog/hedgehog-mode@0.0.42'
356 - '@posthog/icons@0.36.1'
357 - '@posthog/ingestion-alert-plugin@0.0.8'
358 - '@posthog/intercom-plugin@0.0.8'
359 - '@posthog/kinesis-plugin@0.0.8'
360 - '@posthog/laudspeaker-plugin@0.0.8'
361 - '@posthog/lemon-ui@0.0.1'
362 - '@posthog/maxmind-plugin@0.1.6'
363 - '@posthog/migrator3000-plugin@0.0.8'
364 - '@posthog/netdata-event-processing@0.0.8'
365 - '@posthog/nextjs-config@1.5.1'
366 - '@posthog/nextjs@0.0.3'
367 - '@posthog/nuxt@1.2.9'
368 - '@posthog/pagerduty-plugin@0.0.8'
369 - '@posthog/piscina@3.2.1'
370 - '@posthog/plugin-contrib@0.0.6'
371 - '@posthog/plugin-server@1.10.8'
372 - '@posthog/plugin-unduplicates@0.0.8'
373 - '@posthog/postgres-plugin@0.0.8'
374 - '@posthog/react-rrweb-player@1.1.4'
375 - '@posthog/rrdom@0.0.31'
376 - '@posthog/rrweb-player@0.0.31'
377 - '@posthog/rrweb-record@0.0.31'
378 - '@posthog/rrweb-replay@0.0.19'
379 - '@posthog/rrweb-snapshot@0.0.31'
380 - '@posthog/rrweb-utils@0.0.31'
381 - '@posthog/rrweb@0.0.31'
382 - '@posthog/sendgrid-plugin@0.0.8'
383 - '@posthog/siphash@1.1.2'
384 - '@posthog/snowflake-export-plugin@0.0.8'
385 - '@posthog/taxonomy-plugin@0.0.8'
386 - '@posthog/twilio-plugin@0.0.8'
387 - '@posthog/twitter-followers-plugin@0.0.8'
388 - '@posthog/url-normalizer-plugin@0.0.8'
389 - '@posthog/variance-plugin@0.0.8'
390 - '@posthog/web-dev-server@1.0.5'
391 - '@posthog/wizard@1.18.1'
392 - '@posthog/zendesk-plugin@0.0.8'
393 - '@postman/aether-icons@2.23.2'
394 - '@postman/aether-icons@2.23.3'
395 - '@postman/aether-icons@2.23.4'
396 - '@postman/csv-parse@4.0.3'
397 - '@postman/csv-parse@4.0.4'
398 - '@postman/csv-parse@4.0.5'
399 - '@postman/final-node-keytar@7.9.1'
400 - '@postman/final-node-keytar@7.9.2'
401 - '@postman/final-node-keytar@7.9.3'
402 - '@postman/mcp-ui-client@5.5.1'
403 - '@postman/mcp-ui-client@5.5.2'
404 - '@postman/mcp-ui-client@5.5.3'
405 - '@postman/node-keytar@7.9.4'
406 - '@postman/node-keytar@7.9.5'
407 - '@postman/node-keytar@7.9.6'
408 - '@postman/pm-bin-linux-x64@1.24.3'
409 - '@postman/pm-bin-linux-x64@1.24.4'
410 - '@postman/pm-bin-linux-x64@1.24.5'
411 - '@postman/pm-bin-macos-arm64@1.24.3'
412 - '@postman/pm-bin-macos-arm64@1.24.4'
413 - '@postman/pm-bin-macos-arm64@1.24.5'
414 - '@postman/pm-bin-macos-x64@1.24.3'
415 - '@postman/pm-bin-macos-x64@1.24.4'
416 - '@postman/pm-bin-macos-x64@1.24.5'
417 - '@postman/pm-bin-windows-x64@1.24.3'
418 - '@postman/pm-bin-windows-x64@1.24.4'
419 - '@postman/pm-bin-windows-x64@1.24.5'
420 - '@postman/postman-collection-fork@4.3.3'
421 - '@postman/postman-collection-fork@4.3.4'
422 - '@postman/postman-collection-fork@4.3.5'
423 - '@postman/postman-mcp-cli@1.0.3'
424 - '@postman/postman-mcp-cli@1.0.4'
425 - '@postman/postman-mcp-cli@1.0.5'
426 - '@postman/postman-mcp-server@2.4.10'
427 - '@postman/postman-mcp-server@2.4.11'
428 - '@postman/postman-mcp-server@2.4.12'
429 - '@postman/pretty-ms@6.1.1'
430 - '@postman/pretty-ms@6.1.2'
431 - '@postman/pretty-ms@6.1.3'
432 - '@postman/secret-scanner-wasm@2.1.2'
433 - '@postman/secret-scanner-wasm@2.1.3'
434 - '@postman/secret-scanner-wasm@2.1.4'
435 - '@postman/tunnel-agent@0.6.5'
436 - '@postman/tunnel-agent@0.6.6'
437 - '@postman/tunnel-agent@0.6.7'
438 - '@postman/wdio-allure-reporter@0.0.7'
439 - '@postman/wdio-allure-reporter@0.0.8'
440 - '@postman/wdio-allure-reporter@0.0.9'
441 - '@postman/wdio-junit-reporter@0.0.4'
442 - '@postman/wdio-junit-reporter@0.0.5'
443 - '@postman/wdio-junit-reporter@0.0.6'
444 - '@pradhumngautam/common-app@1.0.2'
445 - '@productdevbook/animejs-vue@0.2.1'
446 - '@productdevbook/auth@0.2.2'
447 - '@productdevbook/chatwoot@2.0.1'
448 - '@productdevbook/motion@1.0.4'
449 - '@productdevbook/ts-i18n@1.4.2'
450 - '@pruthvi21/use-debounce@1.0.3'
451 - '@quick-start-soft/quick-document-translator@1.4.2511142126'
452 - '@quick-start-soft/quick-git-clean-markdown@1.4.2511142126'
453 - '@quick-start-soft/quick-markdown-compose@1.4.2506300029'
454 - '@quick-start-soft/quick-markdown-image@1.4.2511142126'
455 - '@quick-start-soft/quick-markdown-print@1.4.2511142126'
456 - '@quick-start-soft/quick-markdown-translator@1.4.2509202331'
457 - '@quick-start-soft/quick-markdown@1.4.2511142126'
458 - '@quick-start-soft/quick-remove-image-background@1.4.2511142126'
459 - '@quick-start-soft/quick-task-refine@1.4.2511142126'
460 - '@relyt/claude-context-core@0.1.1'
461 - '@relyt/claude-context-mcp@0.1.1'
462 - '@relyt/mcp-server-relytone@0.0.3'
463 - '@sameepsi/sor2@2.0.2'
464 - '@sameepsi/sor@1.0.3'
465 - '@seezo/sdr-mcp-server@0.0.5'
466 - '@seung-ju/next@0.0.2'
467 - '@seung-ju/openapi-generator@0.0.4'
468 - '@seung-ju/react-hooks@0.0.2'
469 - '@seung-ju/react-native-action-sheet@0.2.1'
470 - '@silgi/better-auth@0.8.1'
471 - '@silgi/drizzle@0.8.4'
472 - '@silgi/ecosystem@0.7.6'
473 - '@silgi/graphql@0.7.15'
474 - '@silgi/module-builder@0.8.8'
475 - '@silgi/openapi@0.7.4'
476 - '@silgi/permission@0.6.8'
477 - '@silgi/ratelimit@0.2.1'
478 - '@silgi/scalar@0.6.2'
479 - '@silgi/yoga@0.7.1'
480 - '@sme-ui/aoma-vevasound-metadata-lib@0.1.3'
481 - '@strapbuild/react-native-date-time-picker@2.0.4'
482 - '@strapbuild/react-native-perspective-image-cropper-2@0.4.7'
483 - '@strapbuild/react-native-perspective-image-cropper-poojan31@0.4.6'
484 - '@strapbuild/react-native-perspective-image-cropper@0.4.15'
485 - '@suraj_h/medium-common@1.0.5'
486 - '@thedelta/eslint-config@1.0.2'
487 - '@tiaanduplessis/json@2.0.2'
488 - '@tiaanduplessis/json@2.0.3'
489 - '@tiaanduplessis/react-progressbar@1.0.1'
490 - '@tiaanduplessis/react-progressbar@1.0.2'
491 - '@trackstar/angular-trackstar-link@1.0.2'
492 - '@trackstar/react-trackstar-link-upgrade@1.1.10'
493 - '@trackstar/react-trackstar-link@2.0.21'
494 - '@trackstar/test-angular-package@0.0.9'
495 - '@trackstar/test-package@1.1.5'
496 - '@trefox/sleekshop-js@0.1.6'
497 - '@trigo/atrix-acl@4.0.2'
498 - '@trigo/atrix-elasticsearch@2.0.1'
499 - '@trigo/atrix-mongoose@1.0.2'
500 - '@trigo/atrix-orientdb@1.0.2'
501 - '@trigo/atrix-postgres@1.0.3'
502 - '@trigo/atrix-pubsub@4.0.3'
503 - '@trigo/atrix-redis@1.0.2'
504 - '@trigo/atrix-soap@1.0.2'
505 - '@trigo/atrix-swagger@3.0.1'
506 - '@trigo/atrix@7.0.1'
507 - '@trigo/bool-expressions@4.1.3'
508 - '@trigo/eslint-config-trigo@3.3.1'
509 - '@trigo/fsm@3.4.2'
510 - '@trigo/hapi-auth-signedlink@1.3.1'
511 - '@trigo/jsdt@0.2.1'
512 - '@trigo/keycloak-api@1.3.1'
513 - '@trigo/node-soap@0.5.4'
514 - '@trigo/pathfinder-ui-css@0.1.1'
515 - '@trigo/trigo-hapijs@5.0.1'
516 - '@trpc-rate-limiter/cloudflare@0.1.4'
517 - '@trpc-rate-limiter/hono@0.1.4'
518 - '@varsityvibe/api-client@1.3.36'
519 - '@varsityvibe/api-client@1.3.37'
520 - '@varsityvibe/utils@5.0.6'
521 - '@varsityvibe/validation-schemas@0.6.7'
522 - '@varsityvibe/validation-schemas@0.6.8'
523 - '@viapip/eslint-config@0.2.4'
524 - '@vishadtyagi/full-year-calendar@0.1.11'
525 - '@voiceflow/alexa-types@2.15.60'
526 - '@voiceflow/alexa-types@2.15.61'
527 - '@voiceflow/anthropic@0.4.4'
528 - '@voiceflow/anthropic@0.4.5'
529 - '@voiceflow/api-sdk@3.28.58'
530 - '@voiceflow/api-sdk@3.28.59'
531 - '@voiceflow/backend-utils@5.0.1'
532 - '@voiceflow/backend-utils@5.0.2'
533 - '@voiceflow/base-types@2.136.2'
534 - '@voiceflow/base-types@2.136.3'
535 - '@voiceflow/body-parser@1.21.2'
536 - '@voiceflow/body-parser@1.21.3'
537 - '@voiceflow/chat-types@2.14.58'
538 - '@voiceflow/chat-types@2.14.59'
539 - '@voiceflow/circleci-config-sdk-orb-import@0.2.1'
540 - '@voiceflow/circleci-config-sdk-orb-import@0.2.2'
541 - '@voiceflow/commitlint-config@2.6.1'
542 - '@voiceflow/commitlint-config@2.6.2'
543 - '@voiceflow/common@8.9.1'
544 - '@voiceflow/common@8.9.2'
545 - '@voiceflow/default-prompt-wrappers@1.7.3'
546 - '@voiceflow/default-prompt-wrappers@1.7.4'
547 - '@voiceflow/dependency-cruiser-config@1.8.11'
548 - '@voiceflow/dependency-cruiser-config@1.8.12'
549 - '@voiceflow/dtos-interact@1.40.1'
550 - '@voiceflow/dtos-interact@1.40.2'
551 - '@voiceflow/encryption@0.3.2'
552 - '@voiceflow/encryption@0.3.3'
553 - '@voiceflow/eslint-config@7.16.4'
554 - '@voiceflow/eslint-config@7.16.5'
555 - '@voiceflow/eslint-plugin@1.6.1'
556 - '@voiceflow/eslint-plugin@1.6.2'
557 - '@voiceflow/exception@1.10.1'
558 - '@voiceflow/exception@1.10.2'
559 - '@voiceflow/fetch@1.11.1'
560 - '@voiceflow/fetch@1.11.2'
561 - '@voiceflow/general-types@3.2.22'
562 - '@voiceflow/general-types@3.2.23'
563 - '@voiceflow/git-branch-check@1.4.3'
564 - '@voiceflow/git-branch-check@1.4.4'
565 - '@voiceflow/google-dfes-types@2.17.12'
566 - '@voiceflow/google-dfes-types@2.17.13'
567 - '@voiceflow/google-types@2.21.12'
568 - '@voiceflow/google-types@2.21.13'
569 - '@voiceflow/husky-config@1.3.1'
570 - '@voiceflow/husky-config@1.3.2'
571 - '@voiceflow/logger@2.4.2'
572 - '@voiceflow/logger@2.4.3'
573 - '@voiceflow/metrics@1.5.1'
574 - '@voiceflow/metrics@1.5.2'
575 - '@voiceflow/natural-language-commander@0.5.2'
576 - '@voiceflow/natural-language-commander@0.5.3'
577 - '@voiceflow/nestjs-common@2.75.2'
578 - '@voiceflow/nestjs-common@2.75.3'
579 - '@voiceflow/nestjs-mongodb@1.3.1'
580 - '@voiceflow/nestjs-mongodb@1.3.2'
581 - '@voiceflow/nestjs-rate-limit@1.3.2'
582 - '@voiceflow/nestjs-rate-limit@1.3.3'
583 - '@voiceflow/nestjs-redis@1.3.1'
584 - '@voiceflow/nestjs-redis@1.3.2'
585 - '@voiceflow/nestjs-timeout@1.3.1'
586 - '@voiceflow/nestjs-timeout@1.3.2'
587 - '@voiceflow/npm-package-json-lint-config@1.1.1'
588 - '@voiceflow/npm-package-json-lint-config@1.1.2'
589 - '@voiceflow/openai@3.2.2'
590 - '@voiceflow/openai@3.2.3'
591 - '@voiceflow/pino-pretty@4.4.1'
592 - '@voiceflow/pino-pretty@4.4.2'
593 - '@voiceflow/pino@6.11.3'
594 - '@voiceflow/pino@6.11.4'
595 - '@voiceflow/prettier-config@1.10.1'
596 - '@voiceflow/prettier-config@1.10.2'
597 - '@voiceflow/react-chat@1.65.3'
598 - '@voiceflow/react-chat@1.65.4'
599 - '@voiceflow/runtime-client-js@1.17.2'
600 - '@voiceflow/runtime-client-js@1.17.3'
601 - '@voiceflow/runtime@1.29.1'
602 - '@voiceflow/runtime@1.29.2'
603 - '@voiceflow/sdk-runtime@1.43.1'
604 - '@voiceflow/sdk-runtime@1.43.2'
605 - '@voiceflow/secrets-provider@1.9.2'
606 - '@voiceflow/secrets-provider@1.9.3'
607 - '@voiceflow/semantic-release-config@1.4.1'
608 - '@voiceflow/semantic-release-config@1.4.2'
609 - '@voiceflow/serverless-plugin-typescript@2.1.7'
610 - '@voiceflow/serverless-plugin-typescript@2.1.8'
611 - '@voiceflow/slate-serializer@1.7.3'
612 - '@voiceflow/slate-serializer@1.7.4'
613 - '@voiceflow/stitches-react@2.3.2'
614 - '@voiceflow/stitches-react@2.3.3'
615 - '@voiceflow/storybook-config@1.2.2'
616 - '@voiceflow/storybook-config@1.2.3'
617 - '@voiceflow/stylelint-config@1.1.1'
618 - '@voiceflow/stylelint-config@1.1.2'
619 - '@voiceflow/test-common@2.1.1'
620 - '@voiceflow/test-common@2.1.2'
621 - '@voiceflow/tsconfig-paths@1.1.4'
622 - '@voiceflow/tsconfig-paths@1.1.5'
623 - '@voiceflow/tsconfig@1.12.1'
624 - '@voiceflow/tsconfig@1.12.2'
625 - '@voiceflow/utils-designer@1.74.19'
626 - '@voiceflow/utils-designer@1.74.20'
627 - '@voiceflow/verror@1.1.4'
628 - '@voiceflow/verror@1.1.5'
629 - '@voiceflow/vite-config@2.6.2'
630 - '@voiceflow/vite-config@2.6.3'
631 - '@voiceflow/vitest-config@1.10.2'
632 - '@voiceflow/vitest-config@1.10.3'
633 - '@voiceflow/voice-types@2.10.58'
634 - '@voiceflow/voice-types@2.10.59'
635 - '@voiceflow/voiceflow-types@3.32.45'
636 - '@voiceflow/voiceflow-types@3.32.46'
637 - '@voiceflow/widget@1.7.18'
638 - '@voiceflow/widget@1.7.19'
639 - '@vucod/email@0.0.3'
640 - '@zapier/ai-actions-react@0.1.12'
641 - '@zapier/ai-actions-react@0.1.13'
642 - '@zapier/ai-actions-react@0.1.14'
643 - '@zapier/ai-actions@0.1.18'
644 - '@zapier/ai-actions@0.1.19'
645 - '@zapier/ai-actions@0.1.20'
646 - '@zapier/babel-preset-zapier@6.4.1'
647 - '@zapier/babel-preset-zapier@6.4.2'
648 - '@zapier/babel-preset-zapier@6.4.3'
649 - '@zapier/browserslist-config-zapier@1.0.3'
650 - '@zapier/browserslist-config-zapier@1.0.4'
651 - '@zapier/browserslist-config-zapier@1.0.5'
652 - '@zapier/eslint-plugin-zapier@11.0.3'
653 - '@zapier/eslint-plugin-zapier@11.0.4'
654 - '@zapier/eslint-plugin-zapier@11.0.5'
655 - '@zapier/mcp-integration@3.0.1'
656 - '@zapier/mcp-integration@3.0.2'
657 - '@zapier/mcp-integration@3.0.3'
658 - '@zapier/secret-scrubber@1.1.3'
659 - '@zapier/secret-scrubber@1.1.4'
660 - '@zapier/secret-scrubber@1.1.5'
661 - '@zapier/spectral-api-ruleset@1.9.1'
662 - '@zapier/spectral-api-ruleset@1.9.2'
663 - '@zapier/spectral-api-ruleset@1.9.3'
664 - '@zapier/stubtree@0.1.2'
665 - '@zapier/stubtree@0.1.3'
666 - '@zapier/stubtree@0.1.4'
667 - '@zapier/zapier-sdk@0.15.5'
668 - '@zapier/zapier-sdk@0.15.6'
669 - '@zapier/zapier-sdk@0.15.7'
670 - 'ai-crowl-shield@1.0.7'
671 - 'arc-cli-fc@1.0.1'
672 - 'asciitranslator@1.0.3'
673 - 'asyncapi-preview@1.0.1'
674 - 'asyncapi-preview@1.0.2'
675 - 'atrix-mongoose@1.0.1'
676 - 'atrix@1.0.1'
677 - 'automation_model@1.0.491'
678 - 'avvvatars-vue@1.1.2'
679 - 'axios-builder@1.2.1'
680 - 'axios-cancelable@1.0.1'
681 - 'axios-cancelable@1.0.2'
682 - 'axios-timed@1.0.1'
683 - 'axios-timed@1.0.2'
684 - 'babel-preset-kinvey-flex-service@0.1.1'
685 - 'barebones-css@1.1.3'
686 - 'barebones-css@1.1.4'
687 - 'benmostyn-frame-print@1.0.1'
688 - 'bestgpiocontroller@1.0.10'
689 - 'better-auth-nuxt@0.0.10'
690 - 'better-queue-nedb@0.1.5'
691 - 'bidirectional-adapter@1.2.2'
692 - 'bidirectional-adapter@1.2.3'
693 - 'bidirectional-adapter@1.2.4'
694 - 'bidirectional-adapter@1.2.5'
695 - 'blinqio-executions-cli@1.0.41'
696 - 'blob-to-base64@1.0.3'
697 - 'bool-expressions@0.1.2'
698 - 'buffered-interpolation-babylon6@0.2.8'
699 - 'bun-plugin-httpfile@0.1.1'
700 - 'bytecode-checker-cli@1.0.10'
701 - 'bytecode-checker-cli@1.0.11'
702 - 'bytecode-checker-cli@1.0.8'
703 - 'bytecode-checker-cli@1.0.9'
704 - 'bytes-to-x@1.0.1'
705 - 'calc-loan-interest@1.0.4'
706 - 'capacitor-plugin-apptrackingios@0.0.21'
707 - 'capacitor-plugin-purchase@0.1.1'
708 - 'capacitor-plugin-scgssigninwithgoogle@0.0.5'
709 - 'capacitor-purchase-history@0.0.10'
710 - 'capacitor-voice-recorder-wav@6.0.3'
711 - 'cbre-flow-common@1.3.1'
712 - 'cbre-flow-common@1.3.2'
713 - 'ceviz@0.0.5'
714 - 'chrome-extension-downloads@0.0.3'
715 - 'chrome-extension-downloads@0.0.4'
716 - 'claude-token-updater@1.0.3'
717 - 'coinmarketcap-api@3.1.2'
718 - 'coinmarketcap-api@3.1.3'
719 - 'colors-regex@2.0.1'
720 - 'command-irail@0.5.4'
721 - 'compare-obj@1.1.1'
722 - 'compare-obj@1.1.2'
723 - 'composite-reducer@1.0.2'
724 - 'composite-reducer@1.0.3'
725 - 'composite-reducer@1.0.4'
726 - 'composite-reducer@1.0.5'
727 - 'count-it-down@1.0.1'
728 - 'count-it-down@1.0.2'
729 - 'cpu-instructions@0.0.14'
730 - 'create-director-app@0.1.1'
731 - 'create-glee-app@0.2.2'
732 - 'create-glee-app@0.2.3'
733 - 'create-hardhat3-app@1.1.1'
734 - 'create-hardhat3-app@1.1.2'
735 - 'create-hardhat3-app@1.1.3'
736 - 'create-hardhat3-app@1.1.4'
737 - 'create-kinvey-flex-service@0.2.1'
738 - 'create-mcp-use-app@0.5.3'
739 - 'create-mcp-use-app@0.5.4'
740 - 'create-silgi@0.3.1'
741 - 'crypto-addr-codec@0.1.9'
742 - 'css-dedoupe@0.1.2'
743 - 'csv-tool-cli@1.2.1'
744 - 'dashboard-empty-state@1.0.3'
745 - 'designstudiouiux@1.0.1'
746 - 'devstart-cli@1.0.6'
747 - 'dialogflow-es@1.1.1'
748 - 'dialogflow-es@1.1.2'
749 - 'dialogflow-es@1.1.3'
750 - 'dialogflow-es@1.1.4'
751 - 'discord-bot-server@0.1.2'
752 - 'docusaurus-plugin-vanilla-extract@1.0.3'
753 - 'dont-go@1.1.2'
754 - 'dotnet-template@0.0.3'
755 - 'dotnet-template@0.0.4'
756 - 'drop-events-on-property-plugin@0.0.2'
757 - 'easypanel-sdk@0.3.2'
758 - 'electron-volt@0.0.2'
759 - 'email-deliverability-tester@1.1.1'
760 - 'enforce-branch-name@1.1.3'
761 - 'esbuild-plugin-brotli@0.2.1'
762 - 'esbuild-plugin-eta@0.1.1'
763 - 'esbuild-plugin-httpfile@0.4.1'
764 - 'eslint-config-kinvey-flex-service@0.1.1'
765 - 'eslint-config-nitpicky@4.0.1'
766 - 'eslint-config-trigo@22.0.2'
767 - 'eslint-config-zeallat-base@1.0.4'
768 - 'ethereum-ens@0.8.1'
769 - 'evm-checkcode-cli@1.0.12'
770 - 'evm-checkcode-cli@1.0.13'
771 - 'evm-checkcode-cli@1.0.14'
772 - 'evm-checkcode-cli@1.0.15'
773 - 'exact-ticker@0.3.5'
774 - 'expo-audio-session@0.2.1'
775 - 'expo-router-on-rails@0.0.4'
776 - 'express-starter-template@1.0.10'
777 - 'expressos@1.1.3'
778 - 'fat-fingered@1.0.1'
779 - 'fat-fingered@1.0.2'
780 - 'feature-flip@1.0.1'
781 - 'feature-flip@1.0.2'
782 - 'firestore-search-engine@1.2.3'
783 - 'fittxt@1.0.2'
784 - 'fittxt@1.0.3'
785 - 'flapstacks@1.0.1'
786 - 'flapstacks@1.0.2'
787 - 'flatten-unflatten@1.0.1'
788 - 'flatten-unflatten@1.0.2'
789 - 'formik-error-focus@2.0.1'
790 - 'formik-store@1.0.1'
791 - 'frontity-starter-theme@1.0.1'
792 - 'fuzzy-finder@1.0.5'
793 - 'fuzzy-finder@1.0.6'
794 - 'gate-evm-check-code2@2.0.3'
795 - 'gate-evm-check-code2@2.0.4'
796 - 'gate-evm-check-code2@2.0.5'
797 - 'gate-evm-check-code2@2.0.6'
798 - 'gate-evm-tools-test@1.0.5'
799 - 'gate-evm-tools-test@1.0.6'
800 - 'gate-evm-tools-test@1.0.7'
801 - 'gate-evm-tools-test@1.0.8'
802 - 'gatsby-plugin-antd@2.2.1'
803 - 'gatsby-plugin-cname@1.0.1'
804 - 'gatsby-plugin-cname@1.0.2'
805 - 'generator-meteor-stock@0.1.6'
806 - 'generator-ng-itobuz@0.0.15'
807 - 'get-them-args@1.3.3'
808 - 'github-action-for-generator@2.1.27'
809 - 'github-action-for-generator@2.1.28'
810 - 'gitsafe@1.0.5'
811 - 'go-template@0.1.8'
812 - 'go-template@0.1.9'
813 - 'gulp-inject-envs@1.2.1'
814 - 'gulp-inject-envs@1.2.2'
815 - 'haufe-axera-api-client@0.0.1'
816 - 'haufe-axera-api-client@0.0.2'
817 - 'hope-mapboxdraw@0.1.1'
818 - 'hopedraw@1.0.3'
819 - 'hover-design-prototype@0.0.5'
820 - 'httpness@1.0.2'
821 - 'httpness@1.0.3'
822 - 'hyper-fullfacing@1.0.3'
823 - 'hyperterm-hipster@1.0.7'
824 - 'ids-css@1.5.1'
825 - 'ids-enterprise-mcp-server@0.0.2'
826 - 'ids-enterprise-ng@20.1.6'
827 - 'ids-enterprise-typings@20.1.6'
828 - 'image-to-uri@1.0.1'
829 - 'image-to-uri@1.0.2'
830 - 'insomnia-plugin-random-pick@1.0.4'
831 - 'invo@0.2.2'
832 - 'iron-shield-miniapp@0.0.2'
833 - 'ito-button@8.0.3'
834 - 'itobuz-angular-auth@8.0.11'
835 - 'itobuz-angular-button@8.0.11'
836 - 'itobuz-angular@0.0.1'
837 - 'jacob-zuma@1.0.1'
838 - 'jacob-zuma@1.0.2'
839 - 'jaetut-varit-test@1.0.2'
840 - 'jan-browser@0.13.1'
841 - 'jquery-bindings@1.1.2'
842 - 'jquery-bindings@1.1.3'
843 - 'jsonsurge@1.0.7'
844 - 'just-toasty@1.7.1'
845 - 'kill-port@2.0.2'
846 - 'kill-port@2.0.3'
847 - 'kinetix-default-token-list@1.0.5'
848 - 'kinvey-cli-wrapper@0.3.1'
849 - 'kinvey-flex-scripts@0.5.1'
850 - 'kns-error-code@1.0.8'
851 - 'korea-administrative-area-geo-json-util@1.0.7'
852 - 'kwami@1.5.10'
853 - 'kwami@1.5.9'
854 - 'lang-codes@1.0.1'
855 - 'lang-codes@1.0.2'
856 - 'license-o-matic@1.2.1'
857 - 'license-o-matic@1.2.2'
858 - 'lint-staged-imagemin@1.3.1'
859 - 'lint-staged-imagemin@1.3.2'
860 - 'lite-serper-mcp-server@0.2.2'
861 - 'lui-vue-test@0.70.9'
862 - 'luno-api@1.2.3'
863 - 'm25-transaction-utils@1.1.16'
864 - 'manual-billing-system-miniapp-api@1.3.1'
865 - 'mcp-use@1.4.2'
866 - 'mcp-use@1.4.3'
867 - 'medusa-plugin-announcement@0.0.3'
868 - 'medusa-plugin-logs@0.0.17'
869 - 'medusa-plugin-momo@0.0.68'
870 - 'medusa-plugin-product-reviews-kvy@0.0.4'
871 - 'medusa-plugin-zalopay@0.0.40'
872 - 'mod10-check-digit@1.0.1'
873 - 'mon-package-react-typescript@1.0.1'
874 - 'my-saeed-lib@0.1.1'
875 - 'n8n-nodes-tmdb@0.5.1'
876 - 'n8n-nodes-vercel-ai-sdk@0.1.7'
877 - 'n8n-nodes-viral-app@0.2.5'
878 - 'nanoreset@7.0.1'
879 - 'nanoreset@7.0.2'
880 - 'next-circular-dependency@1.0.2'
881 - 'next-circular-dependency@1.0.3'
882 - 'next-simple-google-analytics@1.1.1'
883 - 'next-simple-google-analytics@1.1.2'
884 - 'next-styled-nprogress@1.0.4'
885 - 'next-styled-nprogress@1.0.5'
886 - 'ngx-useful-swiper-prosenjit@9.0.2'
887 - 'ngx-wooapi@12.0.1'
888 - 'nitro-graphql@1.5.12'
889 - 'nitro-kutu@0.1.1'
890 - 'nitrodeploy@1.0.8'
891 - 'nitroping@0.1.1'
892 - 'normal-store@1.3.1'
893 - 'normal-store@1.3.2'
894 - 'normal-store@1.3.3'
895 - 'normal-store@1.3.4'
896 - 'nuxt-keycloak@0.2.2'
897 - 'obj-to-css@1.0.2'
898 - 'obj-to-css@1.0.3'
899 - 'okta-react-router-6@5.0.1'
900 - 'open2internet@0.1.1'
901 - 'orbit-boxicons@2.1.3'
902 - 'orbit-nebula-draw-tools@1.0.10'
903 - 'orbit-nebula-editor@1.0.2'
904 - 'orbit-soap@0.43.13'
905 - 'orchestrix@12.1.2'
906 - 'package-tester@1.0.1'
907 - 'parcel-plugin-asset-copier@1.1.2'
908 - 'parcel-plugin-asset-copier@1.1.3'
909 - 'pdf-annotation@0.0.2'
910 - 'pergel@0.13.2'
911 - 'pergeltest@0.0.25'
912 - 'piclite@1.0.1'
913 - 'pico-uid@1.0.3'
914 - 'pico-uid@1.0.4'
915 - 'pkg-readme@1.1.1'
916 - 'poper-react-sdk@0.1.2'
917 - 'posthog-docusaurus@2.0.6'
918 - 'posthog-js@1.297.3'
919 - 'posthog-node@4.18.1'
920 - 'posthog-node@5.11.3'
921 - 'posthog-node@5.13.3'
922 - 'posthog-plugin-hello-world@1.0.1'
923 - 'posthog-react-native-session-replay@1.2.2'
924 - 'posthog-react-native@4.11.1'
925 - 'posthog-react-native@4.12.5'
926 - 'prime-one-table@0.0.19'
927 - 'prompt-eng-server@1.0.18'
928 - 'prompt-eng@1.0.50'
929 - 'puny-req@1.0.3'
930 - 'quickswap-ads-list@1.0.33'
931 - 'quickswap-default-staking-list-address@1.0.55'
932 - 'quickswap-default-staking-list@1.0.11'
933 - 'quickswap-default-token-list@1.5.16'
934 - 'quickswap-router-sdk@1.0.1'
935 - 'quickswap-sdk@3.0.44'
936 - 'quickswap-smart-order-router@1.0.1'
937 - 'quickswap-token-lists@1.0.3'
938 - 'quickswap-v2-sdk@2.0.1'
939 - 'ra-auth-firebase@1.0.3'
940 - 'ra-data-firebase@1.0.7'
941 - 'ra-data-firebase@1.0.8'
942 - 'react-component-taggers@0.1.9'
943 - 'react-data-to-export@1.0.1'
944 - 'react-element-prompt-inspector@0.1.18'
945 - 'react-favic@1.0.2'
946 - 'react-hook-form-persist@3.0.1'
947 - 'react-hook-form-persist@3.0.2'
948 - 'react-jam-icons@1.0.1'
949 - 'react-jam-icons@1.0.2'
950 - 'react-keycloak-context@1.0.8'
951 - 'react-keycloak-context@1.0.9'
952 - 'react-library-setup@0.0.6'
953 - 'react-linear-loader@1.0.2'
954 - 'react-micromodal.js@1.0.1'
955 - 'react-micromodal.js@1.0.2'
956 - 'react-native-datepicker-modal@1.3.1'
957 - 'react-native-datepicker-modal@1.3.2'
958 - 'react-native-email@2.1.1'
959 - 'react-native-email@2.1.2'
960 - 'react-native-fetch@2.0.1'
961 - 'react-native-fetch@2.0.2'
962 - 'react-native-get-pixel-dimensions@1.0.1'
963 - 'react-native-get-pixel-dimensions@1.0.2'
964 - 'react-native-google-maps-directions@2.1.2'
965 - 'react-native-jam-icons@1.0.1'
966 - 'react-native-jam-icons@1.0.2'
967 - 'react-native-log-level@1.2.1'
968 - 'react-native-log-level@1.2.2'
969 - 'react-native-modest-checkbox@3.3.1'
970 - 'react-native-modest-storage@2.1.1'
971 - 'react-native-phone-call@1.2.1'
972 - 'react-native-phone-call@1.2.2'
973 - 'react-native-retriable-fetch@2.0.1'
974 - 'react-native-retriable-fetch@2.0.2'
975 - 'react-native-use-modal@1.0.3'
976 - 'react-native-view-finder@1.2.1'
977 - 'react-native-view-finder@1.2.2'
978 - 'react-native-websocket@1.0.3'
979 - 'react-native-websocket@1.0.4'
980 - 'react-native-worklet-functions@3.3.3'
981 - 'react-packery-component@1.0.3'
982 - 'react-qr-image@1.1.1'
983 - 'react-scrambled-text@1.0.4'
984 - 'rediff-viewer@0.0.7'
985 - 'rediff@1.0.5'
986 - 'redux-forge@2.5.3'
987 - 'redux-router-kit@1.2.2'
988 - 'redux-router-kit@1.2.3'
989 - 'redux-router-kit@1.2.4'
990 - 'revenuecat@1.0.1'
991 - 'rollup-plugin-httpfile@0.2.1'
992 - 'sa-company-registration-number-regex@1.0.1'
993 - 'sa-company-registration-number-regex@1.0.2'
994 - 'sa-id-gen@1.0.4'
995 - 'sa-id-gen@1.0.5'
996 - 'samesame@1.0.3'
997 - 'scgs-capacitor-subscribe@1.0.11'
998 - 'scgsffcreator@1.0.5'
999 - 'schob@1.0.3'
1000 - 'selenium-session-client@1.0.4'
1001 - 'selenium-session@1.0.5'
1002 - 'set-nested-prop@2.0.1'
1003 - 'set-nested-prop@2.0.2'
1004 - 'shelf-jwt-sessions@0.1.2'
1005 - 'shell-exec@1.1.3'
1006 - 'shell-exec@1.1.4'
1007 - 'shinhan-limit-scrap@1.0.3'
1008 - 'silgi@0.43.30'
1009 - 'simplejsonform@1.0.1'
1010 - 'skills-use@0.1.1'
1011 - 'skills-use@0.1.2'
1012 - 'solomon-api-stories@1.0.2'
1013 - 'solomon-v3-stories@1.15.6'
1014 - 'solomon-v3-ui-wrapper@1.6.1'
1015 - 'soneium-acs@1.0.1'
1016 - 'sort-by-distance@2.0.1'
1017 - 'south-african-id-info@1.0.2'
1018 - 'stat-fns@1.0.1'
1019 - 'stoor@2.3.2'
1020 - 'sufetch@0.4.1'
1021 - 'super-commit@1.0.1'
1022 - 'svelte-autocomplete-select@1.1.1'
1023 - 'svelte-toasty@1.1.2'
1024 - 'svelte-toasty@1.1.3'
1025 - 'tanstack-shadcn-table@1.1.5'
1026 - 'tavily-module@1.0.1'
1027 - 'tcsp-draw-test@1.0.5'
1028 - 'tcsp-test-vd@2.4.4'
1029 - 'tcsp@2.0.2'
1030 - 'template-lib@1.1.3'
1031 - 'template-lib@1.1.4'
1032 - 'template-micro-service@1.0.2'
1033 - 'template-micro-service@1.0.3'
1034 - 'tenacious-fetch@2.3.2'
1035 - 'tenacious-fetch@2.3.3'
1036 - 'test-foundry-app@1.0.1'
1037 - 'test-foundry-app@1.0.2'
1038 - 'test-foundry-app@1.0.3'
1039 - 'test-foundry-app@1.0.4'
1040 - 'test-hardhat-app@1.0.1'
1041 - 'test-hardhat-app@1.0.2'
1042 - 'test-hardhat-app@1.0.3'
1043 - 'test-hardhat-app@1.0.4'
1044 - 'test23112222-api@1.0.1'
1045 - 'tiaan@1.0.2'
1046 - 'tiptap-shadcn-vue@0.2.1'
1047 - 'token.js-fork@0.7.32'
1048 - 'toonfetch@0.3.2'
1049 - 'trigo-react-app@4.1.2'
1050 - 'ts-relay-cursor-paging@2.1.1'
1051 - 'typeface-antonio-complete@1.0.5'
1052 - 'typefence@1.2.2'
1053 - 'typefence@1.2.3'
1054 - 'typeorm-orbit@0.2.27'
1055 - 'unadapter@0.1.3'
1056 - 'undefsafe-typed@1.0.3'
1057 - 'undefsafe-typed@1.0.4'
1058 - 'unemail@0.3.1'
1059 - 'uniswap-router-sdk@1.6.2'
1060 - 'uniswap-smart-order-router@3.16.26'
1061 - 'uniswap-test-sdk-core@4.0.8'
1062 - 'unsearch@0.0.3'
1063 - 'uplandui@0.5.4'
1064 - 'upload-to-play-store@1.0.1'
1065 - 'upload-to-play-store@1.0.2'
1066 - 'url-encode-decode@1.0.1'
1067 - 'url-encode-decode@1.0.2'
1068 - 'use-unsaved-changes@1.0.9'
1069 - 'v-plausible@1.2.1'
1070 - 'valid-south-african-id@1.0.3'
1071 - 'valuedex-sdk@3.0.5'
1072 - 'vf-oss-template@1.0.1'
1073 - 'vf-oss-template@1.0.2'
1074 - 'vf-oss-template@1.0.3'
1075 - 'vf-oss-template@1.0.4'
1076 - 'victoria-wallet-constants@0.1.1'
1077 - 'victoria-wallet-constants@0.1.2'
1078 - 'victoria-wallet-core@0.1.1'
1079 - 'victoria-wallet-core@0.1.2'
1080 - 'victoria-wallet-type@0.1.1'
1081 - 'victoria-wallet-type@0.1.2'
1082 - 'victoria-wallet-utils@0.1.1'
1083 - 'victoria-wallet-utils@0.1.2'
1084 - 'victoria-wallet-validator@0.1.1'
1085 - 'victoria-wallet-validator@0.1.2'
1086 - 'victoriaxoaquyet-wallet-core@0.2.1'
1087 - 'victoriaxoaquyet-wallet-core@0.2.2'
1088 - 'vite-plugin-httpfile@0.2.1'
1089 - 'vue-browserupdate-nuxt@1.0.5'
1090 - 'wallet-evm@0.3.1'
1091 - 'wallet-evm@0.3.2'
1092 - 'wallet-type@0.1.1'
1093 - 'wallet-type@0.1.2'
1094 - 'web-scraper-mcp@1.1.4'
1095 - 'web-types-htmx@0.1.1'
1096 - 'web-types-lit@0.1.1'
1097 - 'webpack-loader-httpfile@0.2.1'
1098 - 'wellness-expert-ng-gallery@5.1.1'
1099 - 'wenk@1.0.10'
1100 - 'wenk@1.0.9'
1101 - 'zapier-async-storage@1.0.1'
1102 - 'zapier-async-storage@1.0.2'
1103 - 'zapier-async-storage@1.0.3'
1104 - 'zapier-platform-cli@18.0.2'
1105 - 'zapier-platform-cli@18.0.3'
1106 - 'zapier-platform-cli@18.0.4'
1107 - 'zapier-platform-core@18.0.2'
1108 - 'zapier-platform-core@18.0.3'
1109 - 'zapier-platform-core@18.0.4'
1110 - 'zapier-platform-legacy-scripting-runner@4.0.2'
1111 - 'zapier-platform-legacy-scripting-runner@4.0.3'
1112 - 'zapier-platform-legacy-scripting-runner@4.0.4'
1113 - 'zapier-platform-schema@18.0.2'
1114 - 'zapier-platform-schema@18.0.3'
1115 - 'zapier-platform-schema@18.0.4'
1116 - 'zapier-scripts@7.8.3'
1117 - 'zapier-scripts@7.8.4'
1118 - 'zuper-cli@1.0.1'
1119 - 'zuper-sdk@1.0.57'
1120 - 'zuper-stream@2.0.9'
1121 condition: all of selection_*
1122falsepositives:
1123 - Unknown
1124level: high
References
-
Shai-Hulud is back, spreading an npm malware worm through thousands of GitHub repos. Learn the impact, attacker methods, and how to defend your supply chain.
Read More -
Contribute to wiz-sec-public/wiz-research-iocs development by creating an account on GitHub.
Read More
Related rules
- Shai-Hulud 2.0 Malicious NPM Package Installation
- Shai-Hulud Malicious Bun Execution
- Shai-Hulud Malicious Bun Execution - Linux
- Linux Suspicious Child Process from Node.js - React2Shell
- Windows Suspicious Child Process from Node.js - React2Shell