Shai-Hulud 2.0 Malicious NPM Package Installation

   1title: Shai-Hulud 2.0 Malicious NPM Package Installation
   2id: bae7c70b-8569-44e9-accf-b30073da8a5d
   3related:
   4    - id: 514f533b-f56e-421d-80b0-f7706a3e9d23
   5      type: similar
   6status: experimental
   7description: |
   8        Detects the command-line installation of specific malicious npm packages and versions associated with the Shai-Hulud 2.0 supply chain attack.
   9references:
  10    - https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack
  11    - https://github.com/wiz-sec-public/wiz-research-iocs/blob/a836ce8aacf12d6d2f6afc3c44b391dc4c08f46e/reports/shai-hulud-2-packages.csv
  12author: Swachchhanda Shrawan Poudel (Nextron Systems)
  13date: 2025-11-28
  14tags:
  15    - attack.initial-access
  16    - attack.execution
  17    - attack.t1195.002
  18    - detection.emerging-threats
  19logsource:
  20    category: process_creation
  21    product: windows
  22detection:
  23    selection_img:
  24        Image|endswith: '\node.exe'
  25        CommandLine|contains:
  26            - 'install'
  27            - ' i '
  28  # List of known malicious packages and versions from the Shai-Hulud 2.0 campaign
  29    selection_packages:
  30        CommandLine|contains:
  31            - '02-echo@0.0.7'
  32            - '@accordproject/concerto-analysis@3.24.1'
  33            - '@accordproject/concerto-linter@3.24.1'
  34            - '@accordproject/concerto-linter-default-ruleset@3.24.1'
  35            - '@accordproject/concerto-metamodel@3.12.5'
  36            - '@accordproject/concerto-types@3.24.1'
  37            - '@accordproject/markdown-it-cicero@0.16.26'
  38            - '@accordproject/template-engine@2.7.2'
  39            - '@actbase/css-to-react-native-transform@1.0.3'
  40            - '@actbase/native@0.1.32'
  41            - '@actbase/node-server@1.1.19'
  42            - '@actbase/react-absolute@0.8.3'
  43            - '@actbase/react-daum-postcode@1.0.5'
  44            - '@actbase/react-kakaosdk@0.9.27'
  45            - '@actbase/react-native-actionsheet@1.0.3'
  46            - '@actbase/react-native-devtools@0.1.3'
  47            - '@actbase/react-native-fast-image@8.5.13'
  48            - '@actbase/react-native-kakao-channel@1.0.2'
  49            - '@actbase/react-native-kakao-navi@2.0.4'
  50            - '@actbase/react-native-less-transformer@1.0.6'
  51            - '@actbase/react-native-naver-login@1.0.1'
  52            - '@actbase/react-native-simple-video@1.0.13'
  53            - '@actbase/react-native-tiktok@1.1.3'
  54            - '@afetcan/api@0.0.13'
  55            - '@afetcan/storage@0.0.27'
  56            - '@alaan/s2s-auth@2.0.3'
  57            - '@alexadark/amadeus-api@1.0.4'
  58            - '@alexadark/gatsby-theme-events@1.0.1'
  59            - '@alexadark/gatsby-theme-wordpress-blog@2.0.1'
  60            - '@alexadark/reusable-functions@1.5.1'
  61            - '@alexcolls/nuxt-socket.io@0.0.7'
  62            - '@alexcolls/nuxt-socket.io@0.0.8'
  63            - '@alexcolls/nuxt-ux@0.6.1'
  64            - '@alexcolls/nuxt-ux@0.6.2'
  65            - '@antstackio/eslint-config-antstack@0.0.3'
  66            - '@antstackio/express-graphql-proxy@0.2.8'
  67            - '@antstackio/graphql-body-parser@0.1.1'
  68            - '@antstackio/json-to-graphql@1.0.3'
  69            - '@antstackio/shelbysam@1.1.7'
  70            - '@aryanhussain/my-angular-lib@0.0.23'
  71            - '@asyncapi/avro-schema-parser@3.0.25'
  72            - '@asyncapi/avro-schema-parser@3.0.26'
  73            - '@asyncapi/bundler@0.6.5'
  74            - '@asyncapi/bundler@0.6.6'
  75            - '@asyncapi/cli@4.1.2'
  76            - '@asyncapi/cli@4.1.3'
  77            - '@asyncapi/converter@1.6.3'
  78            - '@asyncapi/converter@1.6.4'
  79            - '@asyncapi/diff@0.5.1'
  80            - '@asyncapi/diff@0.5.2'
  81            - '@asyncapi/dotnet-rabbitmq-template@1.0.1'
  82            - '@asyncapi/dotnet-rabbitmq-template@1.0.2'
  83            - '@asyncapi/edavisualiser@1.2.1'
  84            - '@asyncapi/edavisualiser@1.2.2'
  85            - '@asyncapi/generator-components@0.3.2'
  86            - '@asyncapi/generator-components@0.3.3'
  87            - '@asyncapi/generator-react-sdk@1.1.4'
  88            - '@asyncapi/generator-react-sdk@1.1.5'
  89            - '@asyncapi/generator@2.8.5'
  90            - '@asyncapi/generator@2.8.6'
  91            - '@asyncapi/go-watermill-template@0.2.76'
  92            - '@asyncapi/go-watermill-template@0.2.77'
  93            - '@asyncapi/html-template@3.3.2'
  94            - '@asyncapi/html-template@3.3.3'
  95            - '@asyncapi/java-spring-cloud-stream-template@0.13.5'
  96            - '@asyncapi/java-spring-cloud-stream-template@0.13.6'
  97            - '@asyncapi/java-spring-template@1.6.1'
  98            - '@asyncapi/java-spring-template@1.6.2'
  99            - '@asyncapi/java-template@0.3.5'
 100            - '@asyncapi/java-template@0.3.6'
 101            - '@asyncapi/keeper@0.0.2'
 102            - '@asyncapi/keeper@0.0.3'
 103            - '@asyncapi/markdown-template@1.6.8'
 104            - '@asyncapi/markdown-template@1.6.9'
 105            - '@asyncapi/modelina-cli@5.10.2'
 106            - '@asyncapi/modelina-cli@5.10.3'
 107            - '@asyncapi/modelina@5.10.2'
 108            - '@asyncapi/modelina@5.10.3'
 109            - '@asyncapi/multi-parser@2.2.1'
 110            - '@asyncapi/multi-parser@2.2.2'
 111            - '@asyncapi/nodejs-template@3.0.5'
 112            - '@asyncapi/nodejs-template@3.0.6'
 113            - '@asyncapi/nodejs-ws-template@0.10.1'
 114            - '@asyncapi/nodejs-ws-template@0.10.2'
 115            - '@asyncapi/nunjucks-filters@2.1.1'
 116            - '@asyncapi/nunjucks-filters@2.1.2'
 117            - '@asyncapi/openapi-schema-parser@3.0.25'
 118            - '@asyncapi/openapi-schema-parser@3.0.26'
 119            - '@asyncapi/optimizer@1.0.5'
 120            - '@asyncapi/optimizer@1.0.6'
 121            - '@asyncapi/parser@3.4.1'
 122            - '@asyncapi/parser@3.4.2'
 123            - '@asyncapi/php-template@0.1.1'
 124            - '@asyncapi/php-template@0.1.2'
 125            - '@asyncapi/problem@1.0.1'
 126            - '@asyncapi/problem@1.0.2'
 127            - '@asyncapi/protobuf-schema-parser@3.5.2'
 128            - '@asyncapi/protobuf-schema-parser@3.5.3'
 129            - '@asyncapi/protobuf-schema-parser@3.6.1'
 130            - '@asyncapi/python-paho-template@0.2.14'
 131            - '@asyncapi/python-paho-template@0.2.15'
 132            - '@asyncapi/react-component@2.6.6'
 133            - '@asyncapi/react-component@2.6.7'
 134            - '@asyncapi/server-api@0.16.24'
 135            - '@asyncapi/server-api@0.16.25'
 136            - '@asyncapi/specs@6.10.1'
 137            - '@asyncapi/specs@6.8.2'
 138            - '@asyncapi/specs@6.8.3'
 139            - '@asyncapi/specs@6.9.1'
 140            - '@asyncapi/studio@1.0.2'
 141            - '@asyncapi/studio@1.0.3'
 142            - '@asyncapi/web-component@2.6.6'
 143            - '@asyncapi/web-component@2.6.7'
 144            - '@bdkinc/knex-ibmi@0.5.7'
 145            - '@browserbasehq/bb9@1.2.21'
 146            - '@browserbasehq/director-ai@1.0.3'
 147            - '@browserbasehq/mcp-server-browserbase@2.4.2'
 148            - '@browserbasehq/mcp@2.1.1'
 149            - '@browserbasehq/sdk-functions@0.0.4'
 150            - '@browserbasehq/stagehand-docs@1.0.1'
 151            - '@browserbasehq/stagehand@3.0.4'
 152            - '@caretive/caret-cli@0.0.2'
 153            - '@chtijs/eslint-config@1.0.1'
 154            - '@clausehq/flows-step-httprequest@0.1.14'
 155            - '@clausehq/flows-step-jsontoxml@0.1.14'
 156            - '@clausehq/flows-step-mqtt@0.1.14'
 157            - '@clausehq/flows-step-sendgridemail@0.1.14'
 158            - '@clausehq/flows-step-taskscreateurl@0.1.14'
 159            - '@cllbk/ghl@1.3.1'
 160            - '@commute/bloom@1.0.3'
 161            - '@commute/market-data-chartjs@2.3.1'
 162            - '@commute/market-data@1.0.2'
 163            - '@dev-blinq/ai-qa-logic@1.0.19'
 164            - '@dev-blinq/blinqioclient@1.0.21'
 165            - '@dev-blinq/cucumber-js@1.0.131'
 166            - '@dev-blinq/cucumber_client@1.0.738'
 167            - '@dev-blinq/ui-systems@1.0.93'
 168            - '@elsedev/react-csr-sdk@0.2.2'
 169            - '@ensdomains/address-encoder@1.1.5'
 170            - '@ensdomains/blacklist@1.0.1'
 171            - '@ensdomains/buffer@0.1.2'
 172            - '@ensdomains/ccip-read-cf-worker@0.0.4'
 173            - '@ensdomains/ccip-read-dns-gateway@0.1.1'
 174            - '@ensdomains/ccip-read-router@0.0.7'
 175            - '@ensdomains/ccip-read-worker-viem@0.0.4'
 176            - '@ensdomains/content-hash@3.0.1'
 177            - '@ensdomains/curvearithmetics@1.0.1'
 178            - '@ensdomains/cypress-metamask@1.2.1'
 179            - '@ensdomains/dnsprovejs@0.5.3'
 180            - '@ensdomains/dnssec-oracle-anchors@0.0.2'
 181            - '@ensdomains/dnssecoraclejs@0.2.9'
 182            - '@ensdomains/durin-middleware@0.0.2'
 183            - '@ensdomains/durin@0.1.2'
 184            - '@ensdomains/ens-archived-contracts@0.0.3'
 185            - '@ensdomains/ens-avatar@1.0.4'
 186            - '@ensdomains/ens-contracts@1.6.1'
 187            - '@ensdomains/ens-test-env@1.0.2'
 188            - '@ensdomains/ens-validation@0.1.1'
 189            - '@ensdomains/ensjs-react@0.0.5'
 190            - '@ensdomains/ensjs@4.0.3'
 191            - '@ensdomains/eth-ens-namehash@2.0.16'
 192            - '@ensdomains/hackathon-registrar@1.0.5'
 193            - '@ensdomains/hardhat-chai-matchers-viem@0.1.15'
 194            - '@ensdomains/hardhat-toolbox-viem-extended@0.0.6'
 195            - '@ensdomains/mock@2.1.52'
 196            - '@ensdomains/name-wrapper@1.0.1'
 197            - '@ensdomains/offchain-resolver-contracts@0.2.2'
 198            - '@ensdomains/op-resolver-contracts@0.0.2'
 199            - '@ensdomains/react-ens-address@0.0.32'
 200            - '@ensdomains/renewal-widget@0.1.10'
 201            - '@ensdomains/renewal@0.0.13'
 202            - '@ensdomains/reverse-records@1.0.1'
 203            - '@ensdomains/server-analytics@0.0.2'
 204            - '@ensdomains/solsha1@0.0.4'
 205            - '@ensdomains/subdomain-registrar@0.2.4'
 206            - '@ensdomains/test-utils@1.3.1'
 207            - '@ensdomains/thorin@0.6.51'
 208            - '@ensdomains/ui@3.4.6'
 209            - '@ensdomains/unicode-confusables@0.1.1'
 210            - '@ensdomains/unruggable-gateways@0.0.3'
 211            - '@ensdomains/vite-plugin-i18next-loader@4.0.4'
 212            - '@ensdomains/web3modal@1.10.2'
 213            - '@everreal/react-charts@2.0.1'
 214            - '@everreal/react-charts@2.0.2'
 215            - '@everreal/validate-esmoduleinterop-imports@1.4.4'
 216            - '@everreal/validate-esmoduleinterop-imports@1.4.5'
 217            - '@everreal/web-analytics@0.0.1'
 218            - '@everreal/web-analytics@0.0.2'
 219            - '@faq-component/core@0.0.4'
 220            - '@faq-component/react@1.0.1'
 221            - '@fishingbooker/browser-sync-plugin@1.0.5'
 222            - '@fishingbooker/react-loader@1.0.7'
 223            - '@fishingbooker/react-pagination@2.0.6'
 224            - '@fishingbooker/react-raty@2.0.1'
 225            - '@fishingbooker/react-swiper@0.1.5'
 226            - '@hapheus/n8n-nodes-pgp@1.5.1'
 227            - '@hover-design/core@0.0.1'
 228            - '@hover-design/react@0.2.1'
 229            - '@huntersofbook/auth-vue@0.4.2'
 230            - '@huntersofbook/core-nuxt@0.4.2'
 231            - '@huntersofbook/core@0.5.1'
 232            - '@huntersofbook/form-naiveui@0.5.1'
 233            - '@huntersofbook/i18n@0.8.2'
 234            - '@huntersofbook/ui@0.5.1'
 235            - '@hyperlook/telemetry-sdk@1.0.19'
 236            - '@ifelsedeveloper/protocol-contracts-svm-idl@0.1.2'
 237            - '@ifelsedeveloper/protocol-contracts-svm-idl@0.1.3'
 238            - '@ifings/design-system@4.9.2'
 239            - '@ifings/metatron3@0.1.5'
 240            - '@jayeshsadhwani/telemetry-sdk@1.0.14'
 241            - '@kvytech/cli@0.0.7'
 242            - '@kvytech/components@0.0.2'
 243            - '@kvytech/habbit-e2e-test@0.0.2'
 244            - '@kvytech/medusa-plugin-announcement@0.0.8'
 245            - '@kvytech/medusa-plugin-management@0.0.5'
 246            - '@kvytech/medusa-plugin-newsletter@0.0.5'
 247            - '@kvytech/medusa-plugin-product-reviews@0.0.9'
 248            - '@kvytech/medusa-plugin-promotion@0.0.2'
 249            - '@kvytech/web@0.0.2'
 250            - '@lessondesk/api-client@9.12.2'
 251            - '@lessondesk/api-client@9.12.3'
 252            - '@lessondesk/babel-preset@1.0.1'
 253            - '@lessondesk/electron-group-api-client@1.0.3'
 254            - '@lessondesk/eslint-config@1.4.2'
 255            - '@lessondesk/material-icons@1.0.3'
 256            - '@lessondesk/react-table-context@2.0.4'
 257            - '@lessondesk/schoolbus@5.2.2'
 258            - '@lessondesk/schoolbus@5.2.3'
 259            - '@livecms/live-edit@0.0.32'
 260            - '@livecms/nuxt-live-edit@1.9.2'
 261            - '@lokeswari-satyanarayanan/rn-zustand-expo-template@1.0.9'
 262            - '@louisle2/core@1.0.1'
 263            - '@louisle2/cortex-js@0.1.6'
 264            - '@lpdjs/firestore-repo-service@1.0.1'
 265            - '@lui-ui/lui-nuxt@0.1.1'
 266            - '@lui-ui/lui-tailwindcss@0.1.2'
 267            - '@lui-ui/lui-vue@1.0.13'
 268            - '@markvivanco/app-version-checker@1.0.1'
 269            - '@markvivanco/app-version-checker@1.0.2'
 270            - '@mcp-use/cli@2.2.6'
 271            - '@mcp-use/cli@2.2.7'
 272            - '@mcp-use/inspector@0.6.2'
 273            - '@mcp-use/inspector@0.6.3'
 274            - '@mcp-use/mcp-use@1.0.1'
 275            - '@mcp-use/mcp-use@1.0.2'
 276            - '@micado-digital/stadtmarketing-kufstein-external@1.9.1'
 277            - '@mizzle-dev/orm@0.0.2'
 278            - '@mparpaillon/connector-parse@1.0.1'
 279            - '@mparpaillon/imagesloaded@4.1.2'
 280            - '@mparpaillon/page@1.0.1'
 281            - '@ntnx/passport-wso2@0.0.3'
 282            - '@ntnx/t@0.0.101'
 283            - '@oku-ui/accordion@0.6.2'
 284            - '@oku-ui/alert-dialog@0.6.2'
 285            - '@oku-ui/arrow@0.6.2'
 286            - '@oku-ui/aspect-ratio@0.6.2'
 287            - '@oku-ui/avatar@0.6.2'
 288            - '@oku-ui/checkbox@0.6.3'
 289            - '@oku-ui/collapsible@0.6.2'
 290            - '@oku-ui/collection@0.6.2'
 291            - '@oku-ui/dialog@0.6.2'
 292            - '@oku-ui/direction@0.6.2'
 293            - '@oku-ui/dismissable-layer@0.6.2'
 294            - '@oku-ui/focus-guards@0.6.2'
 295            - '@oku-ui/focus-scope@0.6.2'
 296            - '@oku-ui/hover-card@0.6.2'
 297            - '@oku-ui/label@0.6.2'
 298            - '@oku-ui/menu@0.6.2'
 299            - '@oku-ui/motion-nuxt@0.2.2'
 300            - '@oku-ui/motion@0.4.4'
 301            - '@oku-ui/popover@0.6.2'
 302            - '@oku-ui/popper@0.6.2'
 303            - '@oku-ui/portal@0.6.2'
 304            - '@oku-ui/presence@0.6.2'
 305            - '@oku-ui/primitive@0.6.2'
 306            - '@oku-ui/primitives-nuxt@0.3.1'
 307            - '@oku-ui/primitives@0.7.9'
 308            - '@oku-ui/progress@0.6.2'
 309            - '@oku-ui/provide@0.6.2'
 310            - '@oku-ui/radio-group@0.6.2'
 311            - '@oku-ui/roving-focus@0.6.2'
 312            - '@oku-ui/scroll-area@0.6.2'
 313            - '@oku-ui/separator@0.6.2'
 314            - '@oku-ui/slider@0.6.2'
 315            - '@oku-ui/slot@0.6.2'
 316            - '@oku-ui/switch@0.6.2'
 317            - '@oku-ui/tabs@0.6.2'
 318            - '@oku-ui/toast@0.6.2'
 319            - '@oku-ui/toggle-group@0.6.2'
 320            - '@oku-ui/toggle@0.6.2'
 321            - '@oku-ui/toolbar@0.6.2'
 322            - '@oku-ui/tooltip@0.6.2'
 323            - '@oku-ui/use-composable@0.6.2'
 324            - '@oku-ui/utils@0.6.2'
 325            - '@oku-ui/visually-hidden@0.6.2'
 326            - '@orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode@2.0.5'
 327            - '@orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode@1.1.1'
 328            - '@orbitgtbelgium/orbit-components@1.2.9'
 329            - '@orbitgtbelgium/time-slider@1.0.187'
 330            - '@osmanekrem/bmad@1.0.6'
 331            - '@osmanekrem/error-handler@1.2.2'
 332            - '@pergel/cli@0.11.1'
 333            - '@pergel/module-box@0.6.1'
 334            - '@pergel/module-graphql@0.6.1'
 335            - '@pergel/module-ui@0.0.9'
 336            - '@pergel/nuxt@0.25.5'
 337            - '@posthog/agent@1.24.1'
 338            - '@posthog/ai@7.1.2'
 339            - '@posthog/automatic-cohorts-plugin@0.0.8'
 340            - '@posthog/bitbucket-release-tracker@0.0.8'
 341            - '@posthog/cli@0.5.15'
 342            - '@posthog/clickhouse@1.7.1'
 343            - '@posthog/core@1.5.6'
 344            - '@posthog/currency-normalization-plugin@0.0.8'
 345            - '@posthog/customerio-plugin@0.0.8'
 346            - '@posthog/databricks-plugin@0.0.8'
 347            - '@posthog/drop-events-on-property-plugin@0.0.8'
 348            - '@posthog/event-sequence-timer-plugin@0.0.8'
 349            - '@posthog/filter-out-plugin@0.0.8'
 350            - '@posthog/first-time-event-tracker@0.0.8'
 351            - '@posthog/geoip-plugin@0.0.8'
 352            - '@posthog/github-release-tracking-plugin@0.0.8'
 353            - '@posthog/gitub-star-sync-plugin@0.0.8'
 354            - '@posthog/heartbeat-plugin@0.0.8'
 355            - '@posthog/hedgehog-mode@0.0.42'
 356            - '@posthog/icons@0.36.1'
 357            - '@posthog/ingestion-alert-plugin@0.0.8'
 358            - '@posthog/intercom-plugin@0.0.8'
 359            - '@posthog/kinesis-plugin@0.0.8'
 360            - '@posthog/laudspeaker-plugin@0.0.8'
 361            - '@posthog/lemon-ui@0.0.1'
 362            - '@posthog/maxmind-plugin@0.1.6'
 363            - '@posthog/migrator3000-plugin@0.0.8'
 364            - '@posthog/netdata-event-processing@0.0.8'
 365            - '@posthog/nextjs-config@1.5.1'
 366            - '@posthog/nextjs@0.0.3'
 367            - '@posthog/nuxt@1.2.9'
 368            - '@posthog/pagerduty-plugin@0.0.8'
 369            - '@posthog/piscina@3.2.1'
 370            - '@posthog/plugin-contrib@0.0.6'
 371            - '@posthog/plugin-server@1.10.8'
 372            - '@posthog/plugin-unduplicates@0.0.8'
 373            - '@posthog/postgres-plugin@0.0.8'
 374            - '@posthog/react-rrweb-player@1.1.4'
 375            - '@posthog/rrdom@0.0.31'
 376            - '@posthog/rrweb-player@0.0.31'
 377            - '@posthog/rrweb-record@0.0.31'
 378            - '@posthog/rrweb-replay@0.0.19'
 379            - '@posthog/rrweb-snapshot@0.0.31'
 380            - '@posthog/rrweb-utils@0.0.31'
 381            - '@posthog/rrweb@0.0.31'
 382            - '@posthog/sendgrid-plugin@0.0.8'
 383            - '@posthog/siphash@1.1.2'
 384            - '@posthog/snowflake-export-plugin@0.0.8'
 385            - '@posthog/taxonomy-plugin@0.0.8'
 386            - '@posthog/twilio-plugin@0.0.8'
 387            - '@posthog/twitter-followers-plugin@0.0.8'
 388            - '@posthog/url-normalizer-plugin@0.0.8'
 389            - '@posthog/variance-plugin@0.0.8'
 390            - '@posthog/web-dev-server@1.0.5'
 391            - '@posthog/wizard@1.18.1'
 392            - '@posthog/zendesk-plugin@0.0.8'
 393            - '@postman/aether-icons@2.23.2'
 394            - '@postman/aether-icons@2.23.3'
 395            - '@postman/aether-icons@2.23.4'
 396            - '@postman/csv-parse@4.0.3'
 397            - '@postman/csv-parse@4.0.4'
 398            - '@postman/csv-parse@4.0.5'
 399            - '@postman/final-node-keytar@7.9.1'
 400            - '@postman/final-node-keytar@7.9.2'
 401            - '@postman/final-node-keytar@7.9.3'
 402            - '@postman/mcp-ui-client@5.5.1'
 403            - '@postman/mcp-ui-client@5.5.2'
 404            - '@postman/mcp-ui-client@5.5.3'
 405            - '@postman/node-keytar@7.9.4'
 406            - '@postman/node-keytar@7.9.5'
 407            - '@postman/node-keytar@7.9.6'
 408            - '@postman/pm-bin-linux-x64@1.24.3'
 409            - '@postman/pm-bin-linux-x64@1.24.4'
 410            - '@postman/pm-bin-linux-x64@1.24.5'
 411            - '@postman/pm-bin-macos-arm64@1.24.3'
 412            - '@postman/pm-bin-macos-arm64@1.24.4'
 413            - '@postman/pm-bin-macos-arm64@1.24.5'
 414            - '@postman/pm-bin-macos-x64@1.24.3'
 415            - '@postman/pm-bin-macos-x64@1.24.4'
 416            - '@postman/pm-bin-macos-x64@1.24.5'
 417            - '@postman/pm-bin-windows-x64@1.24.3'
 418            - '@postman/pm-bin-windows-x64@1.24.4'
 419            - '@postman/pm-bin-windows-x64@1.24.5'
 420            - '@postman/postman-collection-fork@4.3.3'
 421            - '@postman/postman-collection-fork@4.3.4'
 422            - '@postman/postman-collection-fork@4.3.5'
 423            - '@postman/postman-mcp-cli@1.0.3'
 424            - '@postman/postman-mcp-cli@1.0.4'
 425            - '@postman/postman-mcp-cli@1.0.5'
 426            - '@postman/postman-mcp-server@2.4.10'
 427            - '@postman/postman-mcp-server@2.4.11'
 428            - '@postman/postman-mcp-server@2.4.12'
 429            - '@postman/pretty-ms@6.1.1'
 430            - '@postman/pretty-ms@6.1.2'
 431            - '@postman/pretty-ms@6.1.3'
 432            - '@postman/secret-scanner-wasm@2.1.2'
 433            - '@postman/secret-scanner-wasm@2.1.3'
 434            - '@postman/secret-scanner-wasm@2.1.4'
 435            - '@postman/tunnel-agent@0.6.5'
 436            - '@postman/tunnel-agent@0.6.6'
 437            - '@postman/tunnel-agent@0.6.7'
 438            - '@postman/wdio-allure-reporter@0.0.7'
 439            - '@postman/wdio-allure-reporter@0.0.8'
 440            - '@postman/wdio-allure-reporter@0.0.9'
 441            - '@postman/wdio-junit-reporter@0.0.4'
 442            - '@postman/wdio-junit-reporter@0.0.5'
 443            - '@postman/wdio-junit-reporter@0.0.6'
 444            - '@pradhumngautam/common-app@1.0.2'
 445            - '@productdevbook/animejs-vue@0.2.1'
 446            - '@productdevbook/auth@0.2.2'
 447            - '@productdevbook/chatwoot@2.0.1'
 448            - '@productdevbook/motion@1.0.4'
 449            - '@productdevbook/ts-i18n@1.4.2'
 450            - '@pruthvi21/use-debounce@1.0.3'
 451            - '@quick-start-soft/quick-document-translator@1.4.2511142126'
 452            - '@quick-start-soft/quick-git-clean-markdown@1.4.2511142126'
 453            - '@quick-start-soft/quick-markdown-compose@1.4.2506300029'
 454            - '@quick-start-soft/quick-markdown-image@1.4.2511142126'
 455            - '@quick-start-soft/quick-markdown-print@1.4.2511142126'
 456            - '@quick-start-soft/quick-markdown-translator@1.4.2509202331'
 457            - '@quick-start-soft/quick-markdown@1.4.2511142126'
 458            - '@quick-start-soft/quick-remove-image-background@1.4.2511142126'
 459            - '@quick-start-soft/quick-task-refine@1.4.2511142126'
 460            - '@relyt/claude-context-core@0.1.1'
 461            - '@relyt/claude-context-mcp@0.1.1'
 462            - '@relyt/mcp-server-relytone@0.0.3'
 463            - '@sameepsi/sor2@2.0.2'
 464            - '@sameepsi/sor@1.0.3'
 465            - '@seezo/sdr-mcp-server@0.0.5'
 466            - '@seung-ju/next@0.0.2'
 467            - '@seung-ju/openapi-generator@0.0.4'
 468            - '@seung-ju/react-hooks@0.0.2'
 469            - '@seung-ju/react-native-action-sheet@0.2.1'
 470            - '@silgi/better-auth@0.8.1'
 471            - '@silgi/drizzle@0.8.4'
 472            - '@silgi/ecosystem@0.7.6'
 473            - '@silgi/graphql@0.7.15'
 474            - '@silgi/module-builder@0.8.8'
 475            - '@silgi/openapi@0.7.4'
 476            - '@silgi/permission@0.6.8'
 477            - '@silgi/ratelimit@0.2.1'
 478            - '@silgi/scalar@0.6.2'
 479            - '@silgi/yoga@0.7.1'
 480            - '@sme-ui/aoma-vevasound-metadata-lib@0.1.3'
 481            - '@strapbuild/react-native-date-time-picker@2.0.4'
 482            - '@strapbuild/react-native-perspective-image-cropper-2@0.4.7'
 483            - '@strapbuild/react-native-perspective-image-cropper-poojan31@0.4.6'
 484            - '@strapbuild/react-native-perspective-image-cropper@0.4.15'
 485            - '@suraj_h/medium-common@1.0.5'
 486            - '@thedelta/eslint-config@1.0.2'
 487            - '@tiaanduplessis/json@2.0.2'
 488            - '@tiaanduplessis/json@2.0.3'
 489            - '@tiaanduplessis/react-progressbar@1.0.1'
 490            - '@tiaanduplessis/react-progressbar@1.0.2'
 491            - '@trackstar/angular-trackstar-link@1.0.2'
 492            - '@trackstar/react-trackstar-link-upgrade@1.1.10'
 493            - '@trackstar/react-trackstar-link@2.0.21'
 494            - '@trackstar/test-angular-package@0.0.9'
 495            - '@trackstar/test-package@1.1.5'
 496            - '@trefox/sleekshop-js@0.1.6'
 497            - '@trigo/atrix-acl@4.0.2'
 498            - '@trigo/atrix-elasticsearch@2.0.1'
 499            - '@trigo/atrix-mongoose@1.0.2'
 500            - '@trigo/atrix-orientdb@1.0.2'
 501            - '@trigo/atrix-postgres@1.0.3'
 502            - '@trigo/atrix-pubsub@4.0.3'
 503            - '@trigo/atrix-redis@1.0.2'
 504            - '@trigo/atrix-soap@1.0.2'
 505            - '@trigo/atrix-swagger@3.0.1'
 506            - '@trigo/atrix@7.0.1'
 507            - '@trigo/bool-expressions@4.1.3'
 508            - '@trigo/eslint-config-trigo@3.3.1'
 509            - '@trigo/fsm@3.4.2'
 510            - '@trigo/hapi-auth-signedlink@1.3.1'
 511            - '@trigo/jsdt@0.2.1'
 512            - '@trigo/keycloak-api@1.3.1'
 513            - '@trigo/node-soap@0.5.4'
 514            - '@trigo/pathfinder-ui-css@0.1.1'
 515            - '@trigo/trigo-hapijs@5.0.1'
 516            - '@trpc-rate-limiter/cloudflare@0.1.4'
 517            - '@trpc-rate-limiter/hono@0.1.4'
 518            - '@varsityvibe/api-client@1.3.36'
 519            - '@varsityvibe/api-client@1.3.37'
 520            - '@varsityvibe/utils@5.0.6'
 521            - '@varsityvibe/validation-schemas@0.6.7'
 522            - '@varsityvibe/validation-schemas@0.6.8'
 523            - '@viapip/eslint-config@0.2.4'
 524            - '@vishadtyagi/full-year-calendar@0.1.11'
 525            - '@voiceflow/alexa-types@2.15.60'
 526            - '@voiceflow/alexa-types@2.15.61'
 527            - '@voiceflow/anthropic@0.4.4'
 528            - '@voiceflow/anthropic@0.4.5'
 529            - '@voiceflow/api-sdk@3.28.58'
 530            - '@voiceflow/api-sdk@3.28.59'
 531            - '@voiceflow/backend-utils@5.0.1'
 532            - '@voiceflow/backend-utils@5.0.2'
 533            - '@voiceflow/base-types@2.136.2'
 534            - '@voiceflow/base-types@2.136.3'
 535            - '@voiceflow/body-parser@1.21.2'
 536            - '@voiceflow/body-parser@1.21.3'
 537            - '@voiceflow/chat-types@2.14.58'
 538            - '@voiceflow/chat-types@2.14.59'
 539            - '@voiceflow/circleci-config-sdk-orb-import@0.2.1'
 540            - '@voiceflow/circleci-config-sdk-orb-import@0.2.2'
 541            - '@voiceflow/commitlint-config@2.6.1'
 542            - '@voiceflow/commitlint-config@2.6.2'
 543            - '@voiceflow/common@8.9.1'
 544            - '@voiceflow/common@8.9.2'
 545            - '@voiceflow/default-prompt-wrappers@1.7.3'
 546            - '@voiceflow/default-prompt-wrappers@1.7.4'
 547            - '@voiceflow/dependency-cruiser-config@1.8.11'
 548            - '@voiceflow/dependency-cruiser-config@1.8.12'
 549            - '@voiceflow/dtos-interact@1.40.1'
 550            - '@voiceflow/dtos-interact@1.40.2'
 551            - '@voiceflow/encryption@0.3.2'
 552            - '@voiceflow/encryption@0.3.3'
 553            - '@voiceflow/eslint-config@7.16.4'
 554            - '@voiceflow/eslint-config@7.16.5'
 555            - '@voiceflow/eslint-plugin@1.6.1'
 556            - '@voiceflow/eslint-plugin@1.6.2'
 557            - '@voiceflow/exception@1.10.1'
 558            - '@voiceflow/exception@1.10.2'
 559            - '@voiceflow/fetch@1.11.1'
 560            - '@voiceflow/fetch@1.11.2'
 561            - '@voiceflow/general-types@3.2.22'
 562            - '@voiceflow/general-types@3.2.23'
 563            - '@voiceflow/git-branch-check@1.4.3'
 564            - '@voiceflow/git-branch-check@1.4.4'
 565            - '@voiceflow/google-dfes-types@2.17.12'
 566            - '@voiceflow/google-dfes-types@2.17.13'
 567            - '@voiceflow/google-types@2.21.12'
 568            - '@voiceflow/google-types@2.21.13'
 569            - '@voiceflow/husky-config@1.3.1'
 570            - '@voiceflow/husky-config@1.3.2'
 571            - '@voiceflow/logger@2.4.2'
 572            - '@voiceflow/logger@2.4.3'
 573            - '@voiceflow/metrics@1.5.1'
 574            - '@voiceflow/metrics@1.5.2'
 575            - '@voiceflow/natural-language-commander@0.5.2'
 576            - '@voiceflow/natural-language-commander@0.5.3'
 577            - '@voiceflow/nestjs-common@2.75.2'
 578            - '@voiceflow/nestjs-common@2.75.3'
 579            - '@voiceflow/nestjs-mongodb@1.3.1'
 580            - '@voiceflow/nestjs-mongodb@1.3.2'
 581            - '@voiceflow/nestjs-rate-limit@1.3.2'
 582            - '@voiceflow/nestjs-rate-limit@1.3.3'
 583            - '@voiceflow/nestjs-redis@1.3.1'
 584            - '@voiceflow/nestjs-redis@1.3.2'
 585            - '@voiceflow/nestjs-timeout@1.3.1'
 586            - '@voiceflow/nestjs-timeout@1.3.2'
 587            - '@voiceflow/npm-package-json-lint-config@1.1.1'
 588            - '@voiceflow/npm-package-json-lint-config@1.1.2'
 589            - '@voiceflow/openai@3.2.2'
 590            - '@voiceflow/openai@3.2.3'
 591            - '@voiceflow/pino-pretty@4.4.1'
 592            - '@voiceflow/pino-pretty@4.4.2'
 593            - '@voiceflow/pino@6.11.3'
 594            - '@voiceflow/pino@6.11.4'
 595            - '@voiceflow/prettier-config@1.10.1'
 596            - '@voiceflow/prettier-config@1.10.2'
 597            - '@voiceflow/react-chat@1.65.3'
 598            - '@voiceflow/react-chat@1.65.4'
 599            - '@voiceflow/runtime-client-js@1.17.2'
 600            - '@voiceflow/runtime-client-js@1.17.3'
 601            - '@voiceflow/runtime@1.29.1'
 602            - '@voiceflow/runtime@1.29.2'
 603            - '@voiceflow/sdk-runtime@1.43.1'
 604            - '@voiceflow/sdk-runtime@1.43.2'
 605            - '@voiceflow/secrets-provider@1.9.2'
 606            - '@voiceflow/secrets-provider@1.9.3'
 607            - '@voiceflow/semantic-release-config@1.4.1'
 608            - '@voiceflow/semantic-release-config@1.4.2'
 609            - '@voiceflow/serverless-plugin-typescript@2.1.7'
 610            - '@voiceflow/serverless-plugin-typescript@2.1.8'
 611            - '@voiceflow/slate-serializer@1.7.3'
 612            - '@voiceflow/slate-serializer@1.7.4'
 613            - '@voiceflow/stitches-react@2.3.2'
 614            - '@voiceflow/stitches-react@2.3.3'
 615            - '@voiceflow/storybook-config@1.2.2'
 616            - '@voiceflow/storybook-config@1.2.3'
 617            - '@voiceflow/stylelint-config@1.1.1'
 618            - '@voiceflow/stylelint-config@1.1.2'
 619            - '@voiceflow/test-common@2.1.1'
 620            - '@voiceflow/test-common@2.1.2'
 621            - '@voiceflow/tsconfig-paths@1.1.4'
 622            - '@voiceflow/tsconfig-paths@1.1.5'
 623            - '@voiceflow/tsconfig@1.12.1'
 624            - '@voiceflow/tsconfig@1.12.2'
 625            - '@voiceflow/utils-designer@1.74.19'
 626            - '@voiceflow/utils-designer@1.74.20'
 627            - '@voiceflow/verror@1.1.4'
 628            - '@voiceflow/verror@1.1.5'
 629            - '@voiceflow/vite-config@2.6.2'
 630            - '@voiceflow/vite-config@2.6.3'
 631            - '@voiceflow/vitest-config@1.10.2'
 632            - '@voiceflow/vitest-config@1.10.3'
 633            - '@voiceflow/voice-types@2.10.58'
 634            - '@voiceflow/voice-types@2.10.59'
 635            - '@voiceflow/voiceflow-types@3.32.45'
 636            - '@voiceflow/voiceflow-types@3.32.46'
 637            - '@voiceflow/widget@1.7.18'
 638            - '@voiceflow/widget@1.7.19'
 639            - '@vucod/email@0.0.3'
 640            - '@zapier/ai-actions-react@0.1.12'
 641            - '@zapier/ai-actions-react@0.1.13'
 642            - '@zapier/ai-actions-react@0.1.14'
 643            - '@zapier/ai-actions@0.1.18'
 644            - '@zapier/ai-actions@0.1.19'
 645            - '@zapier/ai-actions@0.1.20'
 646            - '@zapier/babel-preset-zapier@6.4.1'
 647            - '@zapier/babel-preset-zapier@6.4.2'
 648            - '@zapier/babel-preset-zapier@6.4.3'
 649            - '@zapier/browserslist-config-zapier@1.0.3'
 650            - '@zapier/browserslist-config-zapier@1.0.4'
 651            - '@zapier/browserslist-config-zapier@1.0.5'
 652            - '@zapier/eslint-plugin-zapier@11.0.3'
 653            - '@zapier/eslint-plugin-zapier@11.0.4'
 654            - '@zapier/eslint-plugin-zapier@11.0.5'
 655            - '@zapier/mcp-integration@3.0.1'
 656            - '@zapier/mcp-integration@3.0.2'
 657            - '@zapier/mcp-integration@3.0.3'
 658            - '@zapier/secret-scrubber@1.1.3'
 659            - '@zapier/secret-scrubber@1.1.4'
 660            - '@zapier/secret-scrubber@1.1.5'
 661            - '@zapier/spectral-api-ruleset@1.9.1'
 662            - '@zapier/spectral-api-ruleset@1.9.2'
 663            - '@zapier/spectral-api-ruleset@1.9.3'
 664            - '@zapier/stubtree@0.1.2'
 665            - '@zapier/stubtree@0.1.3'
 666            - '@zapier/stubtree@0.1.4'
 667            - '@zapier/zapier-sdk@0.15.5'
 668            - '@zapier/zapier-sdk@0.15.6'
 669            - '@zapier/zapier-sdk@0.15.7'
 670            - 'ai-crowl-shield@1.0.7'
 671            - 'arc-cli-fc@1.0.1'
 672            - 'asciitranslator@1.0.3'
 673            - 'asyncapi-preview@1.0.1'
 674            - 'asyncapi-preview@1.0.2'
 675            - 'atrix-mongoose@1.0.1'
 676            - 'atrix@1.0.1'
 677            - 'automation_model@1.0.491'
 678            - 'avvvatars-vue@1.1.2'
 679            - 'axios-builder@1.2.1'
 680            - 'axios-cancelable@1.0.1'
 681            - 'axios-cancelable@1.0.2'
 682            - 'axios-timed@1.0.1'
 683            - 'axios-timed@1.0.2'
 684            - 'babel-preset-kinvey-flex-service@0.1.1'
 685            - 'barebones-css@1.1.3'
 686            - 'barebones-css@1.1.4'
 687            - 'benmostyn-frame-print@1.0.1'
 688            - 'bestgpiocontroller@1.0.10'
 689            - 'better-auth-nuxt@0.0.10'
 690            - 'better-queue-nedb@0.1.5'
 691            - 'bidirectional-adapter@1.2.2'
 692            - 'bidirectional-adapter@1.2.3'
 693            - 'bidirectional-adapter@1.2.4'
 694            - 'bidirectional-adapter@1.2.5'
 695            - 'blinqio-executions-cli@1.0.41'
 696            - 'blob-to-base64@1.0.3'
 697            - 'bool-expressions@0.1.2'
 698            - 'buffered-interpolation-babylon6@0.2.8'
 699            - 'bun-plugin-httpfile@0.1.1'
 700            - 'bytecode-checker-cli@1.0.10'
 701            - 'bytecode-checker-cli@1.0.11'
 702            - 'bytecode-checker-cli@1.0.8'
 703            - 'bytecode-checker-cli@1.0.9'
 704            - 'bytes-to-x@1.0.1'
 705            - 'calc-loan-interest@1.0.4'
 706            - 'capacitor-plugin-apptrackingios@0.0.21'
 707            - 'capacitor-plugin-purchase@0.1.1'
 708            - 'capacitor-plugin-scgssigninwithgoogle@0.0.5'
 709            - 'capacitor-purchase-history@0.0.10'
 710            - 'capacitor-voice-recorder-wav@6.0.3'
 711            - 'cbre-flow-common@1.3.1'
 712            - 'cbre-flow-common@1.3.2'
 713            - 'ceviz@0.0.5'
 714            - 'chrome-extension-downloads@0.0.3'
 715            - 'chrome-extension-downloads@0.0.4'
 716            - 'claude-token-updater@1.0.3'
 717            - 'coinmarketcap-api@3.1.2'
 718            - 'coinmarketcap-api@3.1.3'
 719            - 'colors-regex@2.0.1'
 720            - 'command-irail@0.5.4'
 721            - 'compare-obj@1.1.1'
 722            - 'compare-obj@1.1.2'
 723            - 'composite-reducer@1.0.2'
 724            - 'composite-reducer@1.0.3'
 725            - 'composite-reducer@1.0.4'
 726            - 'composite-reducer@1.0.5'
 727            - 'count-it-down@1.0.1'
 728            - 'count-it-down@1.0.2'
 729            - 'cpu-instructions@0.0.14'
 730            - 'create-director-app@0.1.1'
 731            - 'create-glee-app@0.2.2'
 732            - 'create-glee-app@0.2.3'
 733            - 'create-hardhat3-app@1.1.1'
 734            - 'create-hardhat3-app@1.1.2'
 735            - 'create-hardhat3-app@1.1.3'
 736            - 'create-hardhat3-app@1.1.4'
 737            - 'create-kinvey-flex-service@0.2.1'
 738            - 'create-mcp-use-app@0.5.3'
 739            - 'create-mcp-use-app@0.5.4'
 740            - 'create-silgi@0.3.1'
 741            - 'crypto-addr-codec@0.1.9'
 742            - 'css-dedoupe@0.1.2'
 743            - 'csv-tool-cli@1.2.1'
 744            - 'dashboard-empty-state@1.0.3'
 745            - 'designstudiouiux@1.0.1'
 746            - 'devstart-cli@1.0.6'
 747            - 'dialogflow-es@1.1.1'
 748            - 'dialogflow-es@1.1.2'
 749            - 'dialogflow-es@1.1.3'
 750            - 'dialogflow-es@1.1.4'
 751            - 'discord-bot-server@0.1.2'
 752            - 'docusaurus-plugin-vanilla-extract@1.0.3'
 753            - 'dont-go@1.1.2'
 754            - 'dotnet-template@0.0.3'
 755            - 'dotnet-template@0.0.4'
 756            - 'drop-events-on-property-plugin@0.0.2'
 757            - 'easypanel-sdk@0.3.2'
 758            - 'electron-volt@0.0.2'
 759            - 'email-deliverability-tester@1.1.1'
 760            - 'enforce-branch-name@1.1.3'
 761            - 'esbuild-plugin-brotli@0.2.1'
 762            - 'esbuild-plugin-eta@0.1.1'
 763            - 'esbuild-plugin-httpfile@0.4.1'
 764            - 'eslint-config-kinvey-flex-service@0.1.1'
 765            - 'eslint-config-nitpicky@4.0.1'
 766            - 'eslint-config-trigo@22.0.2'
 767            - 'eslint-config-zeallat-base@1.0.4'
 768            - 'ethereum-ens@0.8.1'
 769            - 'evm-checkcode-cli@1.0.12'
 770            - 'evm-checkcode-cli@1.0.13'
 771            - 'evm-checkcode-cli@1.0.14'
 772            - 'evm-checkcode-cli@1.0.15'
 773            - 'exact-ticker@0.3.5'
 774            - 'expo-audio-session@0.2.1'
 775            - 'expo-router-on-rails@0.0.4'
 776            - 'express-starter-template@1.0.10'
 777            - 'expressos@1.1.3'
 778            - 'fat-fingered@1.0.1'
 779            - 'fat-fingered@1.0.2'
 780            - 'feature-flip@1.0.1'
 781            - 'feature-flip@1.0.2'
 782            - 'firestore-search-engine@1.2.3'
 783            - 'fittxt@1.0.2'
 784            - 'fittxt@1.0.3'
 785            - 'flapstacks@1.0.1'
 786            - 'flapstacks@1.0.2'
 787            - 'flatten-unflatten@1.0.1'
 788            - 'flatten-unflatten@1.0.2'
 789            - 'formik-error-focus@2.0.1'
 790            - 'formik-store@1.0.1'
 791            - 'frontity-starter-theme@1.0.1'
 792            - 'fuzzy-finder@1.0.5'
 793            - 'fuzzy-finder@1.0.6'
 794            - 'gate-evm-check-code2@2.0.3'
 795            - 'gate-evm-check-code2@2.0.4'
 796            - 'gate-evm-check-code2@2.0.5'
 797            - 'gate-evm-check-code2@2.0.6'
 798            - 'gate-evm-tools-test@1.0.5'
 799            - 'gate-evm-tools-test@1.0.6'
 800            - 'gate-evm-tools-test@1.0.7'
 801            - 'gate-evm-tools-test@1.0.8'
 802            - 'gatsby-plugin-antd@2.2.1'
 803            - 'gatsby-plugin-cname@1.0.1'
 804            - 'gatsby-plugin-cname@1.0.2'
 805            - 'generator-meteor-stock@0.1.6'
 806            - 'generator-ng-itobuz@0.0.15'
 807            - 'get-them-args@1.3.3'
 808            - 'github-action-for-generator@2.1.27'
 809            - 'github-action-for-generator@2.1.28'
 810            - 'gitsafe@1.0.5'
 811            - 'go-template@0.1.8'
 812            - 'go-template@0.1.9'
 813            - 'gulp-inject-envs@1.2.1'
 814            - 'gulp-inject-envs@1.2.2'
 815            - 'haufe-axera-api-client@0.0.1'
 816            - 'haufe-axera-api-client@0.0.2'
 817            - 'hope-mapboxdraw@0.1.1'
 818            - 'hopedraw@1.0.3'
 819            - 'hover-design-prototype@0.0.5'
 820            - 'httpness@1.0.2'
 821            - 'httpness@1.0.3'
 822            - 'hyper-fullfacing@1.0.3'
 823            - 'hyperterm-hipster@1.0.7'
 824            - 'ids-css@1.5.1'
 825            - 'ids-enterprise-mcp-server@0.0.2'
 826            - 'ids-enterprise-ng@20.1.6'
 827            - 'ids-enterprise-typings@20.1.6'
 828            - 'image-to-uri@1.0.1'
 829            - 'image-to-uri@1.0.2'
 830            - 'insomnia-plugin-random-pick@1.0.4'
 831            - 'invo@0.2.2'
 832            - 'iron-shield-miniapp@0.0.2'
 833            - 'ito-button@8.0.3'
 834            - 'itobuz-angular-auth@8.0.11'
 835            - 'itobuz-angular-button@8.0.11'
 836            - 'itobuz-angular@0.0.1'
 837            - 'jacob-zuma@1.0.1'
 838            - 'jacob-zuma@1.0.2'
 839            - 'jaetut-varit-test@1.0.2'
 840            - 'jan-browser@0.13.1'
 841            - 'jquery-bindings@1.1.2'
 842            - 'jquery-bindings@1.1.3'
 843            - 'jsonsurge@1.0.7'
 844            - 'just-toasty@1.7.1'
 845            - 'kill-port@2.0.2'
 846            - 'kill-port@2.0.3'
 847            - 'kinetix-default-token-list@1.0.5'
 848            - 'kinvey-cli-wrapper@0.3.1'
 849            - 'kinvey-flex-scripts@0.5.1'
 850            - 'kns-error-code@1.0.8'
 851            - 'korea-administrative-area-geo-json-util@1.0.7'
 852            - 'kwami@1.5.10'
 853            - 'kwami@1.5.9'
 854            - 'lang-codes@1.0.1'
 855            - 'lang-codes@1.0.2'
 856            - 'license-o-matic@1.2.1'
 857            - 'license-o-matic@1.2.2'
 858            - 'lint-staged-imagemin@1.3.1'
 859            - 'lint-staged-imagemin@1.3.2'
 860            - 'lite-serper-mcp-server@0.2.2'
 861            - 'lui-vue-test@0.70.9'
 862            - 'luno-api@1.2.3'
 863            - 'm25-transaction-utils@1.1.16'
 864            - 'manual-billing-system-miniapp-api@1.3.1'
 865            - 'mcp-use@1.4.2'
 866            - 'mcp-use@1.4.3'
 867            - 'medusa-plugin-announcement@0.0.3'
 868            - 'medusa-plugin-logs@0.0.17'
 869            - 'medusa-plugin-momo@0.0.68'
 870            - 'medusa-plugin-product-reviews-kvy@0.0.4'
 871            - 'medusa-plugin-zalopay@0.0.40'
 872            - 'mod10-check-digit@1.0.1'
 873            - 'mon-package-react-typescript@1.0.1'
 874            - 'my-saeed-lib@0.1.1'
 875            - 'n8n-nodes-tmdb@0.5.1'
 876            - 'n8n-nodes-vercel-ai-sdk@0.1.7'
 877            - 'n8n-nodes-viral-app@0.2.5'
 878            - 'nanoreset@7.0.1'
 879            - 'nanoreset@7.0.2'
 880            - 'next-circular-dependency@1.0.2'
 881            - 'next-circular-dependency@1.0.3'
 882            - 'next-simple-google-analytics@1.1.1'
 883            - 'next-simple-google-analytics@1.1.2'
 884            - 'next-styled-nprogress@1.0.4'
 885            - 'next-styled-nprogress@1.0.5'
 886            - 'ngx-useful-swiper-prosenjit@9.0.2'
 887            - 'ngx-wooapi@12.0.1'
 888            - 'nitro-graphql@1.5.12'
 889            - 'nitro-kutu@0.1.1'
 890            - 'nitrodeploy@1.0.8'
 891            - 'nitroping@0.1.1'
 892            - 'normal-store@1.3.1'
 893            - 'normal-store@1.3.2'
 894            - 'normal-store@1.3.3'
 895            - 'normal-store@1.3.4'
 896            - 'nuxt-keycloak@0.2.2'
 897            - 'obj-to-css@1.0.2'
 898            - 'obj-to-css@1.0.3'
 899            - 'okta-react-router-6@5.0.1'
 900            - 'open2internet@0.1.1'
 901            - 'orbit-boxicons@2.1.3'
 902            - 'orbit-nebula-draw-tools@1.0.10'
 903            - 'orbit-nebula-editor@1.0.2'
 904            - 'orbit-soap@0.43.13'
 905            - 'orchestrix@12.1.2'
 906            - 'package-tester@1.0.1'
 907            - 'parcel-plugin-asset-copier@1.1.2'
 908            - 'parcel-plugin-asset-copier@1.1.3'
 909            - 'pdf-annotation@0.0.2'
 910            - 'pergel@0.13.2'
 911            - 'pergeltest@0.0.25'
 912            - 'piclite@1.0.1'
 913            - 'pico-uid@1.0.3'
 914            - 'pico-uid@1.0.4'
 915            - 'pkg-readme@1.1.1'
 916            - 'poper-react-sdk@0.1.2'
 917            - 'posthog-docusaurus@2.0.6'
 918            - 'posthog-js@1.297.3'
 919            - 'posthog-node@4.18.1'
 920            - 'posthog-node@5.11.3'
 921            - 'posthog-node@5.13.3'
 922            - 'posthog-plugin-hello-world@1.0.1'
 923            - 'posthog-react-native-session-replay@1.2.2'
 924            - 'posthog-react-native@4.11.1'
 925            - 'posthog-react-native@4.12.5'
 926            - 'prime-one-table@0.0.19'
 927            - 'prompt-eng-server@1.0.18'
 928            - 'prompt-eng@1.0.50'
 929            - 'puny-req@1.0.3'
 930            - 'quickswap-ads-list@1.0.33'
 931            - 'quickswap-default-staking-list-address@1.0.55'
 932            - 'quickswap-default-staking-list@1.0.11'
 933            - 'quickswap-default-token-list@1.5.16'
 934            - 'quickswap-router-sdk@1.0.1'
 935            - 'quickswap-sdk@3.0.44'
 936            - 'quickswap-smart-order-router@1.0.1'
 937            - 'quickswap-token-lists@1.0.3'
 938            - 'quickswap-v2-sdk@2.0.1'
 939            - 'ra-auth-firebase@1.0.3'
 940            - 'ra-data-firebase@1.0.7'
 941            - 'ra-data-firebase@1.0.8'
 942            - 'react-component-taggers@0.1.9'
 943            - 'react-data-to-export@1.0.1'
 944            - 'react-element-prompt-inspector@0.1.18'
 945            - 'react-favic@1.0.2'
 946            - 'react-hook-form-persist@3.0.1'
 947            - 'react-hook-form-persist@3.0.2'
 948            - 'react-jam-icons@1.0.1'
 949            - 'react-jam-icons@1.0.2'
 950            - 'react-keycloak-context@1.0.8'
 951            - 'react-keycloak-context@1.0.9'
 952            - 'react-library-setup@0.0.6'
 953            - 'react-linear-loader@1.0.2'
 954            - 'react-micromodal.js@1.0.1'
 955            - 'react-micromodal.js@1.0.2'
 956            - 'react-native-datepicker-modal@1.3.1'
 957            - 'react-native-datepicker-modal@1.3.2'
 958            - 'react-native-email@2.1.1'
 959            - 'react-native-email@2.1.2'
 960            - 'react-native-fetch@2.0.1'
 961            - 'react-native-fetch@2.0.2'
 962            - 'react-native-get-pixel-dimensions@1.0.1'
 963            - 'react-native-get-pixel-dimensions@1.0.2'
 964            - 'react-native-google-maps-directions@2.1.2'
 965            - 'react-native-jam-icons@1.0.1'
 966            - 'react-native-jam-icons@1.0.2'
 967            - 'react-native-log-level@1.2.1'
 968            - 'react-native-log-level@1.2.2'
 969            - 'react-native-modest-checkbox@3.3.1'
 970            - 'react-native-modest-storage@2.1.1'
 971            - 'react-native-phone-call@1.2.1'
 972            - 'react-native-phone-call@1.2.2'
 973            - 'react-native-retriable-fetch@2.0.1'
 974            - 'react-native-retriable-fetch@2.0.2'
 975            - 'react-native-use-modal@1.0.3'
 976            - 'react-native-view-finder@1.2.1'
 977            - 'react-native-view-finder@1.2.2'
 978            - 'react-native-websocket@1.0.3'
 979            - 'react-native-websocket@1.0.4'
 980            - 'react-native-worklet-functions@3.3.3'
 981            - 'react-packery-component@1.0.3'
 982            - 'react-qr-image@1.1.1'
 983            - 'react-scrambled-text@1.0.4'
 984            - 'rediff-viewer@0.0.7'
 985            - 'rediff@1.0.5'
 986            - 'redux-forge@2.5.3'
 987            - 'redux-router-kit@1.2.2'
 988            - 'redux-router-kit@1.2.3'
 989            - 'redux-router-kit@1.2.4'
 990            - 'revenuecat@1.0.1'
 991            - 'rollup-plugin-httpfile@0.2.1'
 992            - 'sa-company-registration-number-regex@1.0.1'
 993            - 'sa-company-registration-number-regex@1.0.2'
 994            - 'sa-id-gen@1.0.4'
 995            - 'sa-id-gen@1.0.5'
 996            - 'samesame@1.0.3'
 997            - 'scgs-capacitor-subscribe@1.0.11'
 998            - 'scgsffcreator@1.0.5'
 999            - 'schob@1.0.3'
1000            - 'selenium-session-client@1.0.4'
1001            - 'selenium-session@1.0.5'
1002            - 'set-nested-prop@2.0.1'
1003            - 'set-nested-prop@2.0.2'
1004            - 'shelf-jwt-sessions@0.1.2'
1005            - 'shell-exec@1.1.3'
1006            - 'shell-exec@1.1.4'
1007            - 'shinhan-limit-scrap@1.0.3'
1008            - 'silgi@0.43.30'
1009            - 'simplejsonform@1.0.1'
1010            - 'skills-use@0.1.1'
1011            - 'skills-use@0.1.2'
1012            - 'solomon-api-stories@1.0.2'
1013            - 'solomon-v3-stories@1.15.6'
1014            - 'solomon-v3-ui-wrapper@1.6.1'
1015            - 'soneium-acs@1.0.1'
1016            - 'sort-by-distance@2.0.1'
1017            - 'south-african-id-info@1.0.2'
1018            - 'stat-fns@1.0.1'
1019            - 'stoor@2.3.2'
1020            - 'sufetch@0.4.1'
1021            - 'super-commit@1.0.1'
1022            - 'svelte-autocomplete-select@1.1.1'
1023            - 'svelte-toasty@1.1.2'
1024            - 'svelte-toasty@1.1.3'
1025            - 'tanstack-shadcn-table@1.1.5'
1026            - 'tavily-module@1.0.1'
1027            - 'tcsp-draw-test@1.0.5'
1028            - 'tcsp-test-vd@2.4.4'
1029            - 'tcsp@2.0.2'
1030            - 'template-lib@1.1.3'
1031            - 'template-lib@1.1.4'
1032            - 'template-micro-service@1.0.2'
1033            - 'template-micro-service@1.0.3'
1034            - 'tenacious-fetch@2.3.2'
1035            - 'tenacious-fetch@2.3.3'
1036            - 'test-foundry-app@1.0.1'
1037            - 'test-foundry-app@1.0.2'
1038            - 'test-foundry-app@1.0.3'
1039            - 'test-foundry-app@1.0.4'
1040            - 'test-hardhat-app@1.0.1'
1041            - 'test-hardhat-app@1.0.2'
1042            - 'test-hardhat-app@1.0.3'
1043            - 'test-hardhat-app@1.0.4'
1044            - 'test23112222-api@1.0.1'
1045            - 'tiaan@1.0.2'
1046            - 'tiptap-shadcn-vue@0.2.1'
1047            - 'token.js-fork@0.7.32'
1048            - 'toonfetch@0.3.2'
1049            - 'trigo-react-app@4.1.2'
1050            - 'ts-relay-cursor-paging@2.1.1'
1051            - 'typeface-antonio-complete@1.0.5'
1052            - 'typefence@1.2.2'
1053            - 'typefence@1.2.3'
1054            - 'typeorm-orbit@0.2.27'
1055            - 'unadapter@0.1.3'
1056            - 'undefsafe-typed@1.0.3'
1057            - 'undefsafe-typed@1.0.4'
1058            - 'unemail@0.3.1'
1059            - 'uniswap-router-sdk@1.6.2'
1060            - 'uniswap-smart-order-router@3.16.26'
1061            - 'uniswap-test-sdk-core@4.0.8'
1062            - 'unsearch@0.0.3'
1063            - 'uplandui@0.5.4'
1064            - 'upload-to-play-store@1.0.1'
1065            - 'upload-to-play-store@1.0.2'
1066            - 'url-encode-decode@1.0.1'
1067            - 'url-encode-decode@1.0.2'
1068            - 'use-unsaved-changes@1.0.9'
1069            - 'v-plausible@1.2.1'
1070            - 'valid-south-african-id@1.0.3'
1071            - 'valuedex-sdk@3.0.5'
1072            - 'vf-oss-template@1.0.1'
1073            - 'vf-oss-template@1.0.2'
1074            - 'vf-oss-template@1.0.3'
1075            - 'vf-oss-template@1.0.4'
1076            - 'victoria-wallet-constants@0.1.1'
1077            - 'victoria-wallet-constants@0.1.2'
1078            - 'victoria-wallet-core@0.1.1'
1079            - 'victoria-wallet-core@0.1.2'
1080            - 'victoria-wallet-type@0.1.1'
1081            - 'victoria-wallet-type@0.1.2'
1082            - 'victoria-wallet-utils@0.1.1'
1083            - 'victoria-wallet-utils@0.1.2'
1084            - 'victoria-wallet-validator@0.1.1'
1085            - 'victoria-wallet-validator@0.1.2'
1086            - 'victoriaxoaquyet-wallet-core@0.2.1'
1087            - 'victoriaxoaquyet-wallet-core@0.2.2'
1088            - 'vite-plugin-httpfile@0.2.1'
1089            - 'vue-browserupdate-nuxt@1.0.5'
1090            - 'wallet-evm@0.3.1'
1091            - 'wallet-evm@0.3.2'
1092            - 'wallet-type@0.1.1'
1093            - 'wallet-type@0.1.2'
1094            - 'web-scraper-mcp@1.1.4'
1095            - 'web-types-htmx@0.1.1'
1096            - 'web-types-lit@0.1.1'
1097            - 'webpack-loader-httpfile@0.2.1'
1098            - 'wellness-expert-ng-gallery@5.1.1'
1099            - 'wenk@1.0.10'
1100            - 'wenk@1.0.9'
1101            - 'zapier-async-storage@1.0.1'
1102            - 'zapier-async-storage@1.0.2'
1103            - 'zapier-async-storage@1.0.3'
1104            - 'zapier-platform-cli@18.0.2'
1105            - 'zapier-platform-cli@18.0.3'
1106            - 'zapier-platform-cli@18.0.4'
1107            - 'zapier-platform-core@18.0.2'
1108            - 'zapier-platform-core@18.0.3'
1109            - 'zapier-platform-core@18.0.4'
1110            - 'zapier-platform-legacy-scripting-runner@4.0.2'
1111            - 'zapier-platform-legacy-scripting-runner@4.0.3'
1112            - 'zapier-platform-legacy-scripting-runner@4.0.4'
1113            - 'zapier-platform-schema@18.0.2'
1114            - 'zapier-platform-schema@18.0.3'
1115            - 'zapier-platform-schema@18.0.4'
1116            - 'zapier-scripts@7.8.3'
1117            - 'zapier-scripts@7.8.4'
1118            - 'zuper-cli@1.0.1'
1119            - 'zuper-sdk@1.0.57'
1120            - 'zuper-stream@2.0.9'
1121    condition: all of selection_*
1122falsepositives:
1123    - Unknown
1124level: high
1125regression_tests_path: regression_data/rules-emerging-threats/2025/Malware/Shai-Hulud/proc_creation_win_mal_shai_hulud_malicious_npm_package_installation/info.yml