MAL-2026-11944 Malicious code in @servicetitan/tokens (npm)

npm/@servicetitan/tokens is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

MAL-2026-11819 Malicious code in @servicetitan/anvil-react (npm)

npm/@servicetitan/anvil-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11932 Malicious code in @servicetitan/testing-library (npm)

npm/@servicetitan/testing-library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11927 Malicious code in @servicetitan/stylelint-config (npm)

npm/@servicetitan/stylelint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11859 Malicious code in @servicetitan/error-boundary (npm)

npm/@servicetitan/error-boundary is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in sn-listbox (npm)

npm/sn-listbox is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

MAL-2026-11822 Malicious code in @servicetitan/anvil2 (npm)

npm/@servicetitan/anvil2 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

MAL-2026-11987 Malicious code in sn-listbox (npm)

npm/sn-listbox is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by the...

Malicious code in @nebula.js/cli-build (npm)

npm/@nebula.js/cli-build is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

MAL-2026-11566 Malicious code in @nebula.js/cli-build (npm)

npm/@nebula.js/cli-build is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

MAL-2026-11869 Malicious code in @servicetitan/forge (npm)

npm/@servicetitan/forge is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished...

Malicious code in @servicetitan/titan-chat-ui-common (npm)

npm/@servicetitan/titan-chat-ui-common is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

Malicious code in @nebula.js/nucleus (npm)

npm/@nebula.js/nucleus is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished ...

MAL-2026-12016 Malicious code in @keyv/memcache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738202807ef51e0d987243e641bb2e97a2f4535bed388d631d80ead963a82b2f Package @keyv/[email protected] is a Keyv storage adapter for Memcache. No install-time lifecycle scripts, network exfiltration, credential access,...

Malicious code in @keyv/sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d7cead2743892c76e6718cfbceb4bd4e97681f2281aa5fe283d964e2a01a9 @keyv/sqlite is the SQLite storage adapter for the Keyv key-value library. No malicious code patterns, install-time network fetches, credential reads...

MAL-2026-12020 Malicious code in @keyv/redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6bb14bdfcd4aae57a41c9e6e04cd5f612b12e0f45fbcb57510ccb44b095e77 Analysis of @keyv/[email protected] produced no a static rule matches and no traced behavioral findings. The package is a Redis storage adapter for the key...

MAL-2026-12018 Malicious code in @keyv/mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...

Malicious code in @keyv/mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e7b09271ef0584c4ab876898b9cb09c6cc8a0408bd4bbb7d623726d12c392e @keyv/mysql is the MySQL storage adapter for the keyv key-value abstraction. No exfiltration, install-time fetch-and-execute, silent-relay, credentia...

Malicious code in @keyv/encrypt-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c28175ab56ea558a0634ba48421de59c05f3ebc5e06335162cd2d30a6972495 No static or traced-code signals of installer-side attack were observed in this version of @keyv/encrypt-node. No lifecycle-script fetch-and-execute,...

MAL-2026-12014 Malicious code in @keyv/encrypt-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb40fe6b9df197abf3018c58ce0ab5a9cdb11d3e9bddc636de1779c5c509948c The package contents produced no a static rule matches and no traced behavior indicating credential access, install-time or import-time code executio...