tops-bmad
Version:
CLI tool to install BMAD workflow files into any project with integrated Shai-Hulud 2.0 security scanning
2,610 lines • 104 kB
JSON
{
"version": "1.0.0",
"lastUpdated": "2025-11-24T19:34:59.871Z",
"attackInfo": {
"name": "Shai-Hulud 2.0",
"alias": "The Second Coming",
"firstDetected": "2025-11-24T03:16:00Z",
"description": "Self-replicating npm worm targeting credential theft and supply chain compromise"
},
"indicators": {
"maliciousFiles": [
"setup_bun.js",
"bun_environment.js",
"cloud.json",
"contents.json",
"environment.json",
"truffleSecrets.json"
],
"maliciousWorkflows": [
".github/workflows/discussion.yaml",
".github/workflows/formatter_*.yml"
],
"fileHashes": {
"bun_environment.js": "d60ec97eea19fffb4809bc35b91033b52490ca11",
"setup_bun.js": "d1829b4708126dcc7bea7437c04d1f10eacd4a16"
},
"gitHubIndicators": {
"runnerName": "SHA1HULUD",
"repoDescription": "Shai-Hulud: The Second Coming"
}
},
"stats": {
"totalUniquePackages": 790,
"byOrganization": {
"asyncapi": 36,
"posthog": 62,
"postman": 17,
"ensdomains": 46,
"zapier": 16,
"voiceflow": 57,
"browserbasehq": 7,
"okuui": 41,
"other": 508
}
},
"packages": [
{
"name": "02-echo",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/concerto-analysis",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/concerto-linter",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/concerto-linter-default-ruleset",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/concerto-metamodel",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/concerto-types",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/markdown-docx",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/markdown-it-cicero",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@accordproject/template-engine",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/css-to-react-native-transform",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/native",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/node-server",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-absolute",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-daum-postcode",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-kakaosdk",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-actionsheet",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-devtools",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-fast-image",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-kakao-channel",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-kakao-navi",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-less-transformer",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-naver-login",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-simple-video",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@actbase/react-native-tiktok",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@afetcan/api",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@afetcan/storage",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@alaan/s2s-auth",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@alexadark/amadeus-api",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@alexadark/gatsby-theme-events",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@alexadark/gatsby-theme-wordpress-blog",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@alexadark/reusable-functions",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@alexcolls/nuxt-socket.io",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@alexcolls/nuxt-ux",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@antstackio/eslint-config-antstack",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@antstackio/express-graphql-proxy",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@antstackio/graphql-body-parser",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@antstackio/json-to-graphql",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@antstackio/shelbysam",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@aryanhussain/my-angular-lib",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/avro-schema-parser",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/bundler",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/converter",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/diff",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/dotnet-rabbitmq-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/edavisualiser",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/generator",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/generator-components",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/generator-helpers",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/generator-react-sdk",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/go-watermill-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/html-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/java-spring-cloud-stream-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/java-spring-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/java-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/keeper",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/markdown-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/modelina",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/modelina-cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/multi-parser",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/nodejs-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/nodejs-ws-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/nunjucks-filters",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/openapi-schema-parser",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/optimizer",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/parser",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/php-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/problem",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/protobuf-schema-parser",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/python-paho-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/react-component",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/server-api",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/specs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/studio",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@asyncapi/web-component",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@bdkinc/knex-ibmi",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@browserbasehq/bb9",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@browserbasehq/director-ai",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@browserbasehq/mcp",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@browserbasehq/mcp-server-browserbase",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@browserbasehq/sdk-functions",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@browserbasehq/stagehand",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@browserbasehq/stagehand-docs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@caretive/caret-cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@chtijs/eslint-config",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@clausehq/flows-step-httprequest",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@clausehq/flows-step-jsontoxml",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@clausehq/flows-step-mqtt",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@clausehq/flows-step-sendgridemail",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@clausehq/flows-step-taskscreateurl",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@cllbk/ghl",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@commute/bloom",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@commute/market-data",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@commute/market-data-chartjs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@dev-blinq/ai-qa-logic",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@dev-blinq/blinqioclient",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@dev-blinq/cucumber-js",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@dev-blinq/cucumber_client",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@dev-blinq/ui-systems",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@elsedev/react-csr-sdk",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/address-encoder",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/blacklist",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/buffer",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ccip-read-cf-worker",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ccip-read-dns-gateway",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ccip-read-router",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ccip-read-worker-viem",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/content-hash",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/curvearithmetics",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/cypress-metamask",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/dnsprovejs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/dnssec-oracle-anchors",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/dnssecoraclejs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/durin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/durin-middleware",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ens-archived-contracts",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ens-avatar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ens-contracts",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ens-test-env",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ens-validation",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ensjs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ensjs-react",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/eth-ens-namehash",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/hackathon-registrar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/hardhat-chai-matchers-viem",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/hardhat-toolbox-viem-extended",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/mock",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/name-wrapper",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/offchain-resolver-contracts",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/op-resolver-contracts",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/react-ens-address",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/renewal",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/renewal-widget",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/reverse-records",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/server-analytics",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/solsha1",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/subdomain-registrar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/test-utils",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/thorin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/ui",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/unicode-confusables",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/unruggable-gateways",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/vite-plugin-i18next-loader",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ensdomains/web3modal",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@everreal/react-charts",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@everreal/validate-esmoduleinterop-imports",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@everreal/web-analytics",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@faq-component/core",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@faq-component/react",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@fishingbooker/browser-sync-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@fishingbooker/react-loader",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@fishingbooker/react-pagination",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@fishingbooker/react-raty",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@fishingbooker/react-swiper",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@hapheus/n8n-nodes-pgp",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@hover-design/core",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@hover-design/react",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@huntersofbook/auth-vue",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@huntersofbook/core",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@huntersofbook/core-nuxt",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@huntersofbook/form-naiveui",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@huntersofbook/i18n",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@huntersofbook/ui",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@hyperlook/telemetry-sdk",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ifelsedeveloper/protocol-contracts-svm-idl",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ifings/design-system",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ifings/metatron3",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@jayeshsadhwani/telemetry-sdk",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/components",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/habbit-e2e-test",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/medusa-plugin-announcement",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/medusa-plugin-management",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/medusa-plugin-newsletter",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/medusa-plugin-product-reviews",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/medusa-plugin-promotion",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@kvytech/web",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lessondesk/api-client",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lessondesk/babel-preset",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lessondesk/electron-group-api-client",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lessondesk/eslint-config",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lessondesk/material-icons",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lessondesk/react-table-context",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lessondesk/schoolbus",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@livecms/live-edit",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@livecms/nuxt-live-edit",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lokeswari-satyanarayanan/rn-zustand-expo-template",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@louisle2/core",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@louisle2/cortex-js",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lpdjs/firestore-repo-service",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lui-ui/lui-nuxt",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lui-ui/lui-tailwindcss",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@lui-ui/lui-vue",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@markvivanco/app-version-checker",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@mcp-use/cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@mcp-use/inspector",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@mcp-use/mcp-use",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@mparpaillon/connector-parse",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@mparpaillon/imagesloaded",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@mparpaillon/page",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ntnx/passport-wso2",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@ntnx/t",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/accordion",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/arrow",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/aspect-ratio",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/avatar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/checkbox",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/collapsible",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/collection",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/dialog",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/direction",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/dismissable-layer",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/focus-guards",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/focus-scope",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/hover-card",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/label",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/menu",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/motion",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/motion-nuxt",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/popover",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/popper",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/portal",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/presence",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/primitives",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/primitives-nuxt",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/progress",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/provide",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/radio-group",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/roving-focus",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/scroll-area",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/separator",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/slider",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/slot",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/switch",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/tabs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/toast",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/toggle",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/toggle-group",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/toolbar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/tooltip",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/use-composable",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/utils",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@oku-ui/visually-hidden",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@orbitgtbelgium/orbit-components",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@orbitgtbelgium/time-slider",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@osmanekrem/bmad",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@osmanekrem/error-handler",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@pergel/cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@pergel/module-box",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@pergel/module-graphql",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@pergel/module-ui",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@pergel/nuxt",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/agent",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/ai",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/automatic-cohorts-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/bitbucket-release-tracker",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/clickhouse",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/core",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/currency-normalization-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/customerio-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/databricks-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/drop-events-on-property-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/event-sequence-timer-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/filter-out-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/first-time-event-tracker",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/geoip-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/github-release-tracking-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/gitub-star-sync-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/heartbeat-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/hedgehog-mode",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/icons",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/ingestion-alert-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/intercom-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/kinesis-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/laudspeaker-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/lemon-ui",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/maxmind-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/migrator3000-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/netdata-event-processing",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/nextjs",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/nextjs-config",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/nuxt",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/pagerduty-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/piscina",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/plugin-contrib",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/plugin-server",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/plugin-unduplicates",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/postgres-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/react-rrweb-player",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/rrdom",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/rrweb",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/rrweb-player",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/rrweb-record",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/rrweb-replay",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/rrweb-snapshot",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/rrweb-utils",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/sendgrid-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/siphash",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/snowflake-export-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/taxonomy-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/twilio-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/twitter-followers-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/url-normalizer-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/variance-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/web-dev-server",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/wizard",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@posthog/zendesk-plugin",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/aether-icons",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/csv-parse",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/final-node-keytar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/mcp-ui-client",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/node-keytar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/pm-bin-linux-x64",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/pm-bin-macos-arm64",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/pm-bin-macos-x64",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/pm-bin-windows-x64",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/postman-collection-fork",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/postman-mcp-cli",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/postman-mcp-server",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/pretty-ms",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/secret-scanner-wasm",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/tunnel-agent",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/wdio-allure-reporter",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@postman/wdio-junit-reporter",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@pradhumngautam/common-app",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@productdevbook/animejs-vue",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@productdevbook/auth",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@productdevbook/chatwoot",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@productdevbook/motion",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@productdevbook/ts-i18n",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@pruthvi21/use-debounce",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-document-translator",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-git-clean-markdown",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-markdown",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-markdown-compose",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-markdown-image",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-markdown-print",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-markdown-translator",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-remove-image-background",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@quick-start-soft/quick-task-refine",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@relyt/claude-context-core",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@relyt/claude-context-mcp",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@relyt/mcp-server-relytone",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@sameepsi/sor",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@sameepsi/sor2",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@seezo/sdr-mcp-server",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@seung-ju/next",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@seung-ju/openapi-generator",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@seung-ju/react-hooks",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@seung-ju/react-native-action-sheet",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/better-auth",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/drizzle",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/ecosystem",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/graphql",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/module-builder",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/openapi",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/permission",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/ratelimit",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/scalar",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@silgi/yoga",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@sme-ui/aoma-vevasound-metadata-lib",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@strapbuild/react-native-date-time-picker",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@strapbuild/react-native-perspective-image-cropper",
"severity": "critical",
"affectedVersions": [
"*"
]
},
{
"name": "@strapbuild/react-native-perspective-im