Executive Summary

On May 11th between 19:20 and 19:26 UTC, an attacker published 42 malicious TanStack npm packages with multiple malicious versions per package. An aggregate download count of all the packages affected reaches in the tens of millions, increasing the severity of the attack substantially. These malicious package versions targeted Continuous Integration Continuous Delivery (CI/CD) systems to steal build and production environment credentials across multiple services and continue to publish additional malicious packages. Malicious payloads from this attack targeted credentials from AWS, GCP, Kubernetes, Vault, Github, npm, pip, SSH, commercial VPN configurations, messaging applications, and cryptocurrency wallets. At the time of writing, at least three other libraries were affected by similar malware, including Python pip and PHP Composer packages.

The initial malicious libraries published by TanStack to npm were identified as malware within the hour by Ashish Kurmi, an external researcher for StepSecurity. Tanstack removed and purged their Github cache entries within two hours of the initial compromise.

This malicious behavior mirrors many patterns within the recent Shai-Hulud attacks and is attributed to TeamPCP. The attack exacerbates the trend of the group targeting victim CI/CD dependencies to hit developers. This attack specifically targets the Github OpenID Connect (OIDC) federation mechanism, which mints a new valid npm publish token on the compromised CI identity. This ensures affected packages have a “verified provenance” badge in npm, commonly used to delineate rouge package deployments, and ensures that a CI/CD publish step does not need to complete for the worm to propagate.

Organizations that are affected should immediately audit installed packages to confirm whether any of the affected libraries were installed. If so, treat the machine as compromised and follow the Mitigations and Workarounds below.

Affected Systems or Products

Beazley Security will continue to monitor developments related to propagation of this worm as technical details emerge. An initial list of impacted packages is included in the Appendix of this advisory and is also being tracked by researchers at socket.dev.

Mitigations / Workarounds

If you believe that a machine has already been impacted, assume all secrets that are accessible on the affected host are compromised. We do not advise cleaning in place and instead recommend reimaging or rebuilding affected machines from known good images.

Any credentials related to AWS, GCP, Kubernetes, Vault, Github, NPM, Pip, or SSH on a host with an affected version should be rotated immediately. Any keys that match the following regex should be considered compromised and exfiled:

  • /npm_[A-Za-z0-9]{36,}/g

  • /gh[op]_[A-Za-z0-9]{36}/g

  • /hvs\.[A-Za-z0-9_-]{24,}/g

  • /eyJhbGciOiJSUzI1NiIsImtpZCI6[\w\-.]+/g

  • /AKIA[0-9A-Z]{16}/g

The following hard-coded paths for files are enumerated by the payload and any instances of these credentials are assumed to be compromised as well. These paths include credentials more commonly found on developer machines rather than purely CI/CD pipelines:

  • ~/.azure/accessTokens.json

  • ~/.config/gcloud/*

  • ~/.kube/config

  • /var/run/secrets/kubernetes.io/serviceaccount/token

  • ~/.terraform.d/credentials.tfrc.json

  • /etc/rancher/k3s/k3s.yaml

  • /var/lib/docker/containers/*/config.v2.json

  • ~/.bash_history

  • ~/.zsh_history

  • ~/.python_history

  • ~/.mysql_history

  • ~/.ssh/id_rsa

  • ~/.ssh/id_ed25519

  • ~/.ssh/id_ecdsa

  • ~/.git-credentials

  • ~/.gitconfig

  • .vscode/tasks.json

  • .vscode/setup.mjs

  • ~/.npmrc

  • ~/.pypirc

  • ~/.docker/config.json

  • ~/.netrc

  • ~/.yarnrc

  • ~/.claude.json

  • ~/.claude/mcp.json

  • ~/.kiro/settings/mcp.json

  • ~/.bitcoin/wallet.dat

  • ~/.ethereum/keystore/*

  • ~/.monero/*

  • ~/.zcash/wallet.dat

  • ~/.config/Signal/*

  • ~/.config/Slack/Cookies,

  • ~/.config/discord/*

  • ~/.config/telegram-desktop/*

It’s been identified by Github user @carlini that revocation of Github tokens will trigger a wipe of the home directory of the current user via rm -rf ~/. This affects developer machines much more than CI/CD pipelines.

For endpoints and developer machines, ensure that the affected packaged are not installed on the host: 

find / \( -name "package-lock.json" -o -name "pnpm-lock.yaml" -o -name "yarn.lock" \) -exec sh -c ' grep -E "@agentwork-cli|@beproduc|@cap-j|@dirigible-a|@draftaut|@draftla|@mesade|@mistrala|@ml-toolkit-t|@opensearch-projec|@squaw|@supersurkhe|@tallyu|@tanstac|@taskflow-cor|@tolk|@uipath|" "$1" | grep "node_modules" && echo " ^^ found in: $1" ' _ {} \;

Ensure that the payload is not installed on any suspected hosts:

find / ((-name "package-lock.json" -o -name "pnpm-lock.yaml" -o -name "yarn.lock") -o ( -path "

Additionally, persistence mechanisms appear in Linux and macOS under the name gh-token-monitor within systemd and launchctl respectively. Using pinned versions of libraries is recommended to prevent this kind of attack if new malicious versions are released for any library.

Using pinned versions of libraries is recommended to help mitigate these attacks in the future. NPM specifically offers a configuration, npm config set min-release-age 3, that will enforce a 48-72 hour period on new package releases before installing them on your machine. This is advised for all developers using external npm packages. For machines running without human interaction, such as CI/CD pipelines, we advise not only version pinning of packages but disabling scripts on installs with the –ignore-scripts argument wherever possible. Python’s and PHP’s package managers don’t advise globally updating all packages regularly and therefore are less likely to be unpinned and installed each CI/CD invocation, so no such mechanism exists within the respective package managers.

Patches

While not strictly a patch, ensuring that any installed affected npm, pip, and conductor packages are removed and purged from your machines is recommended. This involves removing the affected packages and installing pinned versions of the unaffected packages.

Indicators of Compromise

Network Activity

api[.]masscan[.]cloud

filev2[.]getsession[.]org

git-tanstack[.]com

seed1[.]getsession[.]org

filev2[.]getsession[.]org/file/

File Name

Hash

router_init.js OR router_runtime.js

12ed9a3c1f73617aefdb740480695c04405d7b4b

router_init.js (sha256)

ab4fcadaec49c03278063dd269ea5eef82d24f2124a8e15d7b90f2fa8601266c

tanstack_runner.js OR router_init.js

e7d582b98ca80690883175470e96f703ef6dc497

How Beazley Security is responding

Beazley Security is conducting threat hunts across our MDR environment to detect potential exploitation attempts against our clients.

If you believe your organization may have been impacted by this attack campaign and need support, please contact our Incident Response team.

Appendix

Product

Affected Version

Package Manger

@antv/li-sam-assets

0.1.4, 0.2.4, 0.3.4

npm

openclaw-cn

0.3.0

npm

@openclaw-cn/feishu

0.2.11

npm

@openclaw-cn/cli

1.4.1

npm

@starmind/collector-cli

0.3.10

npm

@openclaw-cn/toutiao-ops

1.2.4

npm

@openclaw-cn/libsignal

2.1.1

npm

byte-parser

1.1.0, 1.2.0

npm

@antv/g-image-exporter

1.1.42, 1.2.42

npm

@antv/gi-assets-advance

2.6.22, 2.7.22

npm

@antv/x6-geometry

2.1.5, 2.2.5

npm

@antv/x6

3.2.7, 3.3.7

npm

@antv/graphlib

2.1.4, 2.2.4

npm

@antv/g2

5.5.8, 5.6.8

npm

@antv/g6

5.2.1, 5.3.1

npm

@antv/li-analysis-assets

1.10.1, 1.11.1

npm

@antv/infographic

0.3.19, 0.4.19

npm

@antv/vendor

1.1.11, 1.2.11

npm

@antv/x6-vector

1.5.2, 1.6.2

npm

@antv/g2plot

2.5.35, 2.6.35

npm

@antv/s2

2.8.1, 2.9.1

npm

@antv/f2

5.15.0, 5.16.0

npm

@antv/dumi-theme-antv

0.9.4, 0.10.4

npm

@antv/component

2.2.11, 2.3.11

npm

@antv/util

3.4.11, 3.5.11

npm

@antv/gi-assets-basic

2.5.40, 2.6.40

npm

@antv/xflow-extension

1.1.55, 1.2.55

npm

@antv/li-p2

1.9.2, 1.10.2

npm

@antv/x6-common

2.1.17, 2.2.17

npm

@antv/l7-layers

2.26.10, 2.27.10

npm

@antv/ava

3.5.1, 3.6.1

npm

@antv/xflow-core

1.1.55, 1.2.55

npm

@antv/l7plot

0.6.11, 0.7.11

npm

@antv/s2-vue

2.3.0, 2.4.0

npm

@antv/larkmap

1.6.1, 1.7.1

npm

timeago.js

4.1.2, 4.2.2

npm

@antv/t8

0.4.0, 0.5.0

npm

@antv/smart-color

0.3.1, 0.4.1

npm

@antv/li-editor

1.7.1, 1.8.1

npm

@antv/l7-composite-layers

0.18.1, 0.19.1

npm

@antv/l7-editor

1.2.13, 1.3.13

npm

@antv/l7-core

2.26.10, 2.27.10

npm

@antv/x6-react-components

2.1.9, 2.2.9

npm

@antv/s2-react

2.4.1, 2.5.1

npm

@antv/adjust

0.3.5, 0.4.5

npm

@antv/f-engine

1.11.0, 1.12.0

npm

@antv/attr

0.4.5, 0.5.5

npm

@antv/lite-insight

2.2.1, 2.3.1

npm

@antv/li-sdk

1.6.1, 1.7.1

npm

@antv/g2-plugin-slider

2.2.1, 2.3.1

npm

@antv/x6-plugin-stencil

2.2.5, 2.3.5

npm

@antv/gi-assets-janusgraph

1.2.15, 1.3.15

npm

@antv/x6-plugin-dnd

2.2.1, 2.3.1

npm

@antv/data-set

0.12.8, 0.13.8

npm

@antv/d3-interpolate

1.1.3, 1.2.3

npm

@antv/dipper-component

0.1.4, 0.2.4

npm

@antv/g6-extension-3d

0.2.23, 0.3.23

npm

@antv/l7-extension-g-layer

1.1.0, 1.2.0

npm

@antv/xflow-diff

1.1.0, 1.2.0

npm

@antv/l7-mapkit

0.6.0, 0.7.0

npm

@antv/f-charts

0.1.0, 0.2.0

npm

@antv/f6-alipay

0.1.7, 0.2.7

npm

@antv/a8

0.1.1, 0.2.1

npm

ribbon.js

1.1.2

npm

@antv/gi-sdk

3.1.0, 3.2.0

npm

@antv/g6-core

0.9.24, 0.10.24

npm

@antv/scale

0.6.2, 0.7.2

npm

@antv/g-webgpu-unitchart

0.6.1, 0.7.1

npm

@antv/x6-plugin-transform

2.2.8, 2.3.8

npm

@antv/data-samples

1.1.1, 1.2.1

npm

@antv/l7-renderer

2.26.10, 2.27.10

npm

@antv/d3-color

1.1.0, 1.2.0

npm

@antv/f2-graphic

0.1.16, 0.2.16

npm

@antv/xflow

2.2.13, 2.3.13

npm

@antv/g-mobile-svg

1.2.1, 1.3.1

npm

@antv/gi-assets-algorithm

2.4.19, 2.5.19

npm

@antv/x6-components

0.11.7, 0.12.7

npm

jest-url-loader

0.2.0, 0.3.0

npm

@antv/g6-react-node

1.5.8, 1.6.8

npm

@antv/g-plugin-control

2.2.1, 2.3.1

npm

@antv/l7-draw

3.2.5, 3.3.5

npm

@antv/g2plot-schemas

1.3.2, 1.4.2

npm

@antv/gi-assets-tugraph

2.2.15, 2.3.15

npm

@antv/g-plugin-webgpu-device

1.10.17, 1.11.17

npm

@antv/x6-angular-shape

3.1.1, 3.2.1

npm

@antv/dw-random

1.2.7, 1.3.7

npm

@antv/dom-util

2.1.4, 2.2.4

npm

@antv/gi-common-components

1.4.16, 1.5.16

npm

@antv/g-plugin-rough-canvas-renderer

2.2.1, 2.3.1

npm

@antv/torch

1.1.6, 1.2.6

npm

@antv/g-shader-components

2.1.0, 2.2.0

npm

miz

1.1.1, 1.2.1

npm

@antv/sam

0.3.0, 0.4.0

npm

@antv/g-plugin-zdog-svg-renderer

2.2.1, 2.3.1

npm

@antv/g-plugin-svg-renderer

2.5.1, 2.6.1

npm

@antv/gatsby-theme

0.2.0, 0.3.0

npm

@antv/g-plugin-physx

2.2.1, 2.3.1

npm

@antv/g-plugin-canvas-renderer

2.6.1, 2.7.1

npm

jest-electron

0.2.12, 0.3.12

npm

@antv/l7-utils

2.26.10, 2.27.10

npm

@antv/g-plugin-svg-picker

2.1.46, 2.2.46

npm

@antv/g2-ssr

0.3.0, 0.4.0

npm

@antv/geo-coord

1.1.8, 1.2.8

npm

@antv/gi-sdk-app

1.3.10, 1.4.10

npm

@antv/g-plugin-box2d

2.2.1, 2.3.1

npm

@antv/g-plugin-gesture

2.2.1, 2.3.1

npm

@antv/translator

1.1.1, 1.2.1

npm

@antv/vis-predict-engine

0.2.1, 0.3.1

npm

@antv/f-vue

1.11.0, 1.12.0

npm

@antv/gi-assets-xlab

0.2.30, 0.3.30

npm

@antv/l7-map

2.26.10, 2.27.10

npm

jest-less-loader

0.3.0, 0.4.0

npm

@antv/chart-linter

1.2.6, 1.3.6

npm

@antv/g-plugin-canvas-path-generator

2.2.26, 2.3.26

npm

@antv/x6-plugin-scroller

2.1.10, 2.2.10

npm

@antv/mcp-server-chart

0.10.10, 0.11.10

npm

word-width

1.1.1, 1.2.1

npm

@antv/graphin-components

2.5.1, 2.6.1

npm

uri-parse

1.1.0, 1.2.0

npm

@antv/x6-plugin-export

2.2.6, 2.3.6

npm

ai-figure

0.5.0, 0.6.0

npm

@antv/knowledge

1.2.4, 1.3.4

npm

@antv/l7-pass

1.1.0, 1.2.0

npm

@antv/g-plugin-webgl-renderer

1.1.26, 1.2.26

npm

@antv/gl-matrix

2.8.1, 2.9.1

npm

@antv/g6-pc

0.9.25, 0.10.25

npm

@antv/g-webgpu-compiler

0.8.2, 0.9.2

npm

@antv/g6-wx

0.1.1, 0.2.1

npm

@antv/g-plugin-canvaskit-renderer

2.4.1, 2.5.1

npm

@antv/gi-public-data

1.1.1, 1.2.1

npm

@antv/g6-ssr

0.2.1, 0.3.1

npm

@antv/g-lottie-player

1.2.1, 1.3.1

npm

@antv/g6-alipay

0.1.1, 0.2.1

npm

@antv/g-dom-mutation-observer-api

2.1.42, 2.2.42

npm

@antv/g6-mobile

0.2.2, 0.3.2

npm

mcp-mermaid

0.5.1, 0.6.1

npm

@antv/l7-source

2.26.10, 2.27.10

npm

@antv/g-webgpu-engine

0.8.2, 0.9.2

npm

@antv/dipper-hooks

0.3.1, 0.4.1

npm

lint-md

0.3.0, 0.4.0

npm

@antv/matrix-util

3.1.4, 3.2.4

npm

@antv/g2-brush

0.1.2, 0.2.2

npm

@antv/data-wizard

2.1.4, 2.2.4

npm

@antv/f2-my

4.1.52, 4.2.52

npm

@antv/my-f2-pc

0.2.1, 0.3.1

npm

@antv/g-web-animations-api

2.2.32, 2.3.32

npm

@antv/f6-core

0.1.2, 0.2.2

npm

@antv/x6-plugin-clipboard

2.2.6, 2.3.6

npm

@antv/l7-scene

2.26.10, 2.27.10

npm

@antv/x6-react

0.2.26, 0.3.26

npm

@antv/g-gesture

3.1.42, 3.2.42

npm

@antv/webgpu-graph

1.1.0, 1.2.0

npm

@antv/g-webgl-compute

0.1.1, 0.2.1

npm

@antv/layout-gpu

1.2.7, 1.3.7

npm

@antv/github-config-cli

0.2.0, 0.3.0

npm

@antv/color-schema

0.3.3, 0.4.3

npm

@antv/l7-district

2.4.12, 2.5.12

npm

@antv/g-plugin-rough-svg-renderer

2.2.1, 2.3.1

npm

mcp-echarts

0.8.1, 0.9.1

npm

@antv/gi-assets-neo4j

2.2.15, 2.3.15

npm

@antv/g-canvas

2.3.0, 2.4.0

npm

@antv/g-base

0.6.16, 0.7.16

npm

@antv/event-emitter

0.2.3, 0.3.3

npm

@antv/g6-extension-react

0.3.7, 0.4.7

npm

lint-md-cli

0.2.2, 0.3.2

npm

@antv/g-mobile-webgl

1.2.1, 1.3.1

npm

@antv/dipper-map

1.1.10, 1.2.10

npm

@antv/async-hook

2.3.9, 2.4.9

npm

@antv/semantic-release-pnpm

1.1.4, 1.2.4

npm

@antv/g-canvaskit

1.2.1, 1.3.1

npm

fixed-round

1.1.2, 1.2.2

npm

jest-random-mock

1.1.0, 1.2.0

npm

@antv/l7-mini

2.21.8, 2.22.8

npm

@antv/f2-react

5.15.0, 5.16.0

npm

@antv/g-webgpu-raytracer

0.6.1, 0.7.1

npm

@antv/g6-cli

0.1.4, 0.2.4

npm

@antv/gpt-vis

1.1.0, 1.2.0

npm

slice.js

1.2.1, 1.3.1

npm

@antv/l7-leaflet

1.1.2, 1.2.2

npm

@antv/f6

0.1.19, 0.2.19

npm

@antv/f-my

1.11.0, 1.12.0

npm

@antv/g6-plugin

0.9.25, 0.10.25

npm

@antv/graphin-graphscope

1.1.5, 1.2.5

npm

@antv/g-plugin-mobile-interaction

1.1.42, 1.2.42

npm

@antv/g-plugin-image-loader

2.4.1, 2.5.1

npm

@antv/g-plugin-3d

2.2.1, 2.3.1

npm

@antv/g6-plugin-map-view

0.1.4, 0.2.4

npm

@antv/gi-assets-scene

2.3.21, 2.4.21

npm

@antv/chart-node-g6

0.1.4, 0.2.4

npm

jest-canvas-mock

2.6.3, 2.7.3

npm

gantt-for-react

0.3.0, 0.4.0

npm

@antv/g-camera-api

2.1.45, 2.2.45

npm

@antv/f-wx

1.11.0, 1.12.0

npm

@antv/g-mobile

1.2.5, 1.3.5

npm

@antv/narrative-text-editor

0.3.20, 0.4.20

npm

@antv/gi-assets-tugraph-analytics

0.3.15, 0.4.15

npm

@antv/path-util

3.1.1, 3.2.1

npm

@antv/gi-mock-data

1.1.5, 1.2.5

npm

@antv/f-lottie

1.11.0, 1.12.0

npm

@antv/gi-assets-galaxybase

1.3.15, 1.4.15

npm

relationship.js

1.3.9, 1.4.9

npm

@antv/l7-maps

2.26.10, 2.27.10

npm

@lint-md/core

2.1.0, 2.2.0

npm

@antv/narrative-text-schema

0.4.7, 0.5.7

npm

@antv/f6-wx

0.1.7, 0.2.7

npm

@antv/f2-canvas

1.1.5, 1.2.5

npm

@antv/narrative-text-vis

0.4.16, 0.5.16

npm

@antv/f6-plugin

1.1.6, 1.2.6

npm

@antv/interaction

0.2.5, 0.3.5

npm

@antv/g-components

2.1.42, 2.2.42

npm

@antv/s2-react-components

2.2.2, 2.3.2

npm

@antv/g-webgl

2.2.1, 2.3.1

npm

size-sensor

1.1.4, 1.2.4

npm

@antv/graphin

3.1.5, 3.2.5

npm

@antv/f6-element

0.1.1, 0.2.1

npm

amapcn

0.2.2, 0.3.2

npm

@antv/g-plugin-annotation

1.3.0, 1.4.0

npm

@antv/g-plugin-webgl-device

1.10.17, 1.11.17

npm

jest-date-mock

1.1.11, 1.2.11

npm

@antv/l7-react

2.5.3, 2.6.3

npm

@antv/g-plugin-a11y

1.5.1, 1.6.1

npm

@antv/f2-site

4.1.42, 4.2.42

npm

@antv/g-lite

2.8.0, 2.9.0

npm

@antv/react-g

2.2.1, 2.3.1

npm

@antv/algorithm

0.2.26, 0.3.26

npm

@antv/wx-f2

2.2.1, 2.3.1

npm

@antv/g-webgpu

2.2.1, 2.3.1

npm

@antv/thumbnails-component

2.1.0, 2.2.0

npm

@antv/g-device-api

1.7.13, 1.8.13

npm

@antv/g6-element

0.9.25, 0.10.25

npm

@antv/g-web-components

2.2.1, 2.3.1

npm

echarts-for-react

3.1.7, 3.2.7

npm

@antv/word-scale-chart

0.4.4, 0.5.4

npm

timeago-react

3.1.7, 3.2.7

npm

@antv/g2-extension-3d

0.3.0, 0.4.0

npm

@antv/f2-algorithm

5.8.0, 5.9.0

npm

@antv/x6-vue3-shape

1.1.0, 1.2.0

npm

@antv/gpt-vis-ssr

0.4.7, 0.5.7

npm

@antv/f-test-utils

1.1.9, 1.2.9

npm

@antv/g-webgpu-core

0.8.2, 0.9.2

npm

@lint-md/cli

2.1.0, 2.2.0

npm

@antv/g-plugin-yoga

2.4.1, 2.5.1

npm

@antv/li-core-assets

1.4.7, 1.5.7

npm

@antv/stat

0.1.2, 0.2.2

npm

@antv/l7-component

2.26.10, 2.27.10

npm

@antv/l7-three

2.26.10, 2.27.10

npm

@antv/expr

1.1.2, 1.2.2

npm

@antv/g-plugin-matterjs

2.2.1, 2.3.1

npm

@antv/ava-react

3.4.2, 3.5.2

npm

@antv/g-mobile-canvas-element

1.1.42, 1.2.42

npm

@antv/hierarchy

0.8.1, 0.9.1

npm

@antv/x6-plugin-history

2.3.4, 2.4.4

npm

@antv/g-perf

1.1.0, 1.2.0

npm

react-adsense

0.2.0, 0.3.0

npm

ast-plugin

0.1.7, 0.2.7

npm

@antv/g-plugin-gpgpu

1.10.20, 1.11.20

npm

@antv/f6-hammerjs

0.1.2, 0.2.2

npm

@antv/calendar-heatmap

1.2.2, 1.3.2

npm

filesize.js

2.1.0, 2.2.0

npm

@antv/x6-plugin-minimap

2.1.7, 2.2.7

npm

@antv/dw-util

1.2.4, 1.3.4

npm

@antv/mcp-server-antv

0.2.8, 0.3.8

npm

@antv/layout-wasm

1.5.2, 1.6.2

npm

xmorse

1.1.0, 1.2.0

npm

@antv/x6-plugin-keyboard

2.3.3, 2.4.3

npm

@antv/coord

0.5.7, 0.6.7

npm

@antv/g-plugin-canvas-picker

2.4.1, 2.5.1

npm

@antv/f6-ui

1.1.3, 1.2.3

npm

@antv/chart-visualization-skills

0.2.3, 0.3.3

npm

@antv/xflow-hook

1.1.55, 1.2.55

npm

canvas-nest.js

2.1.4, 2.2.4

npm

@antv/insight-component

1.1.0, 1.2.0

npm

@antv/awards

0.1.9, 0.2.9

npm

@antv/my-f2

2.2.7, 2.3.7

npm

@antv/gi-cli

1.3.11, 1.4.11

npm

@antv/f2-wordcloud

5.15.0, 5.16.0

npm

limit-size

0.2.4, 0.3.4

npm

jest-expect

0.1.1, 0.2.1

npm

@antv/f2-context

0.1.1, 0.2.1

npm

@antv/thumbnails

2.1.0, 2.2.0

npm

@lint-md/parser

0.1.14, 0.2.14

npm

babel-plugin-version

0.3.3, 0.4.3

npm

@antv/g2-extension-plot

0.3.2, 0.4.2

npm

@antv/gi-theme-antd

0.7.11, 0.8.11

npm

@antv/f2-wx

4.1.51, 4.2.51

npm

@antv/f2-vue

4.1.33, 4.2.33

npm

@antv/l7plot-component

0.1.11, 0.2.11

npm

@antv/g-compat

1.1.11, 1.2.11

npm

@antv/x6-plugin-selection

2.3.2, 2.4.2

npm

@antv/g6-editor

1.3.0, 1.4.0

npm

onfire.js

2.1.1, 2.2.1

npm

@antv/dw-transform

1.2.7, 1.3.7

npm

@antv/g-pattern

2.1.42, 2.2.42

npm

@antv/g-plugin-device-renderer

2.7.1, 2.8.1

npm

@antv/g-math

3.2.0, 3.3.0

npm

@antv/gi-assets-graphscope

2.2.15, 2.3.15

npm

@antv/x6-vue-shape

3.1.2, 3.2.2

npm

@antv/l7

2.26.10, 2.27.10

npm

@antv/g2-extension-ava

0.3.0, 0.4.0

npm

@antv/ckb

2.1.4, 2.2.4

npm

@antv/li-aiearth-assets

0.5.7, 0.6.7

npm

@antv/g-plugin-dragndrop

2.2.1, 2.3.1

npm

@antv/g-plugin-css-select

2.2.1, 2.3.1

npm

@antv/s2-ssr

0.2.1, 0.3.1

npm

@antv/x6-react-shape

3.1.1, 3.2.1

npm

@antv/g6-plugins

1.1.9, 1.2.9

npm

@antv/istanbul

0.1.0, 0.2.0

npm

@antv/dw-analyzer

1.2.5, 1.3.5

npm

@antv/g-plugin-html-renderer

2.4.1, 2.5.1

npm

@antv/x6-plugin-snapline

2.2.7, 2.3.7

npm

@antv/g-svg

2.2.1, 2.3.1

npm

@antv/graphin-icons

1.1.0, 1.2.0

npm

@antv/g-css-layout-api

1.1.38, 1.2.38

npm

@antv/g

6.4.1, 6.5.1

npm

@antv/g-css-typed-om-api

1.1.38, 1.2.38

npm

@antv/g-layout-blocklike

1.8.49, 1.9.49

npm

@antv/g-plugin-zdog-canvas-renderer

2.2.1, 2.3.1

npm

@antv/g-mobile-canvas

1.2.1, 1.3.1

npm

@antv/f-react

1.11.0, 1.12.0

npm

@antv/gi-assets-hugegraph

1.2.15, 1.3.15

npm

boring-avatars-vanilla

1.1.2, 1.2.2

npm

@antv/color-util

2.1.6, 2.2.6

npm

@antv/g-plugin-dom-interaction

2.2.31, 2.3.31

npm

@opensearch-project/opensearch

3.5.3, 3.6.2, 3.7.0, 3.8.0

npm

cross-stitch

1.1.3 - 1.1.7

npm

@squawk/fix-data

0.6.4 - 0.6.8

npm

@squawk/weather

0.5.6 - 0.5.10

npm

@squawk/icao-registry-data

0.8.4 - 0.8.8

npm

@squawk/airport-data

0.7.4 - 0.7.8

npm

@squawk/flightplan

0.5.2 - 0.5.6

npm

@squawk/units

0.4.3 - 0.4.7

npm

@squawk/flight-math

0.5.4 - 0.5.8

npm

@squawk/mcp

0.9.1 - 0.9.5

npm

@squawk/fixes

0.3.2 - 0.3.6

npm

@squawk/airspace-data

0.5.3 - 0.5.7

npm

@squawk/procedure-data

0.7.3 - 0.7.7

npm

@squawk/navaids

0.4.2 - 0.4.6

npm

@squawk/procedures

0.5.2 - 0.5.6

npm

@squawk/notams

0.3.6 - 0.3.10

npm

@squawk/airways

0.4.2 - 0.4.6

npm

@squawk/airports

0.6.2 - 0.6.6

npm

ts-dna

3.0.1 - 3.0.5

npm

@squawk/types

0.8.1 - 0.8.5

npm

@squawk/icao-registry

0.5.2 - 0.5.6

npm

@squawk/airspace

0.8.1 - 0.8.5

npm

@squawk/geo

0.4.4 - 0.4.8

npm

@squawk/navaid-data

0.6.4 - 0.6.8

npm

@squawk/airway-data

0.5.4 - 0.5.8

npm

@mistralai/mistralai

2.2.2 - 2.2.4

npm

@beproduct/nestjs-auth

0.1.2 - 0.1.19

npm

git-git-git

1.0.8 - 1.0.12

npm

git-branch-selector

1.3.3 - 1.3.7

npm

@tallyui/pos

0.1.1 - 0.1.3

npm

@tallyui/connector-vendure

1.0.1 - 1.0.3

npm

@supersurkhet/cli

0.0.2 - 0.0.7

npm

@taskflow-corp/cli

0.1.24 - 0.1.29

npm

nextmove-mcp

0.1.3 - 0.1.7

npm

@tolka/cli

1.0.2 - 1.0.6

npm

cmux-agent-mcp

0.1.3 - 0.1.8

npm

@tallyui/connector-shopify

1.0.1 - 1.0.3

npm

@tallyui/components

1.0.1 - 1.0.3

npm

@tallyui/theme

0.2.1 - 0.2.3

npm

wot-api

0.8.1 - 0.8.4

npm

@supersurkhet/sdk

0.0.2 - 0.0.7

npm

@tallyui/storage-sqlite

0.2.1 - 0.2.3

npm

@tallyui/connector-woocommerce

1.0.1 - 1.0.3

npm

@tallyui/database

1.0.1 - 1.0.3

npm

@tallyui/connector-medusa

1.0.1 - 1.0.3

npm

@tallyui/core

0.2.1 - 0.2.3

npm

@mistralai/mistralai-azure

1.7.1 - 1.7.3

npm

@mistralai/mistralai-gcp

1.7.1 - 1.7.3

npm

@mesadev/saguaro

0.4.22

npm

@mesadev/sdk

0.28.3

npm

@mesadev/rest

0.28.3

npm

@uipath/apollo-react

4.24.5

npm

@uipath/agent.sdk

0.0.18

npm

@uipath/apollo-core

5.9.2

npm

@uipath/apollo-wind

2.16.2

npm

@uipath/tool-workflowcompiler

0.0.12

npm

@uipath/filesystem

1.0.1

npm

@uipath/robot

1.3.4

npm

@uipath/telemetry

0.0.7

npm

@uipath/integrationservice-sdk

1.0.2

npm

@uipath/ap-chat

1.5.7

npm

@uipath/widget.sdk

1.2.3

npm

@uipath/agent-sdk

1.0.2

npm

@uipath/packager-tool-apiworkflow

0.0.19

npm

@uipath/case-tool

1.0.1

npm

@uipath/codedagents-tool

0.1.12

npm

@uipath/api-workflow-tool

1.0.1

npm

@uipath/context-grounding-tool

0.1.1

npm

@uipath/packager-tool-workflowcompiler-browser

0.0.34

npm

@uipath/packager-tool-workflowcompiler

0.0.16

npm

@uipath/aops-policy-tool

0.3.1

npm

@uipath/flow-tool

1.0.2

npm

@uipath/resourcecatalog-tool

0.1.1

npm

@uipath/vertical-solutions-tool

1.0.1

npm

@uipath/data-fabric-tool

1.0.2

npm

@uipath/packager-tool-case

0.0.9

npm

@uipath/codedagent-tool

1.0.1

npm

@uipath/ui-widgets-multi-file-upload

1.0.1

npm

@uipath/docsai-tool

1.0.1

npm

@uipath/insights-tool

1.0.1

npm

@uipath/solutionpackager-sdk

1.0.11

npm

@uipath/auth

1.0.1

npm

@uipath/maestro-tool

1.0.1

npm

@uipath/cli

1.0.1

npm

@uipath/llmgw-tool

1.0.1

npm

@uipath/resource-tool

1.0.1

npm

@uipath/packager-tool-flow

0.0.19

npm

@uipath/common

1.0.1

npm

@uipath/gov-tool

0.3.1

npm

@uipath/traces-tool

1.0.1

npm

@uipath/packager-tool-bpmn

0.0.9

npm

@uipath/insights-sdk

1.0.1

npm

@uipath/admin-tool

0.1.1

npm

@uipath/packager-tool-webapp

1.0.6

npm

@uipath/solutionpackager-tool-core

0.0.34

npm

@uipath/vss

0.1.6

npm

@uipath/orchestrator-tool

1.0.1

npm

@uipath/solution-packager

0.0.35

npm

@uipath/uipath-python-bridge

1.0.1

npm

@uipath/codedapp-tool

1.0.1

npm

@uipath/project-packager

1.1.16

npm

@uipath/integrationservice-tool

1.0.2

npm

@uipath/packager-tool-functions

0.1.1

npm

@uipath/tasks-tool

1.0.1

npm

@uipath/solution-tool

1.0.1

npm

@uipath/packager-tool-connector

0.0.19

npm

@uipath/maestro-sdk

1.0.1

npm

@uipath/test-manager-tool

1.0.2

npm

@uipath/agent-tool

1.0.1

npm

@uipath/functions-tool

1.0.1

npm

@uipath/identity-tool

0.1.1

npm

@uipath/access-policy-tool

0.3.1

npm

@uipath/resources-tool

0.1.11

npm

@uipath/rpa-tool

0.9.5

npm

@uipath/rpa-legacy-tool

1.0.1

npm

@uipath/access-policy-sdk

0.3.1

npm

@uipath/platform-tool

1.0.1

npm

@dirigible-ai/sdk

0.6.2 - 0.6.3

npm

@ml-toolkit-ts/preprocessing

1.0.2 - 1.0.3

npm

@ml-toolkit-ts/xgboost

1.0.3 - 1.0.4

npm

ml-toolkit-ts

1.0.4 - 1.0.5

npm

agentwork-cli

0.1.4 - 0.1.5

npm

@draftlab/auth

0.24.1 - 0.24.2

npm

@draftauth/core

0.13.1 - 0.13.2

npm

@draftauth/client

0.2.1 - 0.2.2

npm

@draftlab/db

0.16.1 - 0.16.2

npm

safe-action

0.8.3 - 0.8.4

npm

@draftlab/auth-router

0.5.1 - 0.5.2

npm

@tanstack/react-router

1.169.5, 1.169.8

npm

@tanstack/solid-router

1.169.5, 1.169.8

npm

@tanstack/router-core

1.169.5, 1.169.8

npm

@tanstack/start-plugin-core

1.169.23, 1.169.26

npm

@tanstack/vue-router

1.169.5, 1.169.8

npm

@tanstack/router-plugin

1.167.38, 1.167.41

npm

@tanstack/vue-start-client

1.166.46, 1.166.49

npm

@tanstack/react-start-rsc

0.0.47, 0.0.50

npm

@tanstack/start-client-core

1.168.5, 1.168.8

npm

@tanstack/eslint-plugin-start

0.0.4, 0.0.7

npm

@tanstack/react-start

1.167.68, 1.167.71

npm

@tanstack/router-generator

1.166.45, 1.166.48

npm

@tanstack/eslint-plugin-router

1.161.9, 1.161.12

npm

@tanstack/router-devtools-core

1.167.6, 1.167.9

npm

@tanstack/vue-start

1.167.61, 1.167.64

npm

@tanstack/start-server-core

1.167.33, 1.167.36

npm

@tanstack/solid-start-server

1.166.54, 1.166.57

npm

@tanstack/start-storage-context

1.166.38, 1.166.41

npm

@tanstack/solid-start-client

1.166.50, 1.166.53

npm

@tanstack/solid-start

1.167.65, 1.167.68

npm

@tanstack/router-ssr-query-core

1.168.3, 1.168.6

npm

@tanstack/virtual-file-routes

1.161.10, 1.161.13

npm

@tanstack/react-router-ssr-query

1.166.15, 1.166.18

npm

@tanstack/nitro-v2-vite-plugin

1.154.12, 1.154.15

npm

@tanstack/vue-start-server

1.166.50, 1.166.53

npm

@tanstack/solid-router-ssr-query

1.166.15, 1.166.18

npm

@tanstack/react-start-server

1.166.55, 1.166.58

npm

@tanstack/react-start-client

1.166.51, 1.166.54

npm

@tanstack/start-fn-stubs

1.161.9, 1.161.12

npm

@tanstack/router-utils

1.161.11, 1.161.14

npm

@tanstack/react-router-devtools

1.166.16, 1.166.19

npm

@tanstack/solid-router-devtools

1.166.16, 1.166.19

npm

@tanstack/history

1.161.9, 1.161.12

npm

@tanstack/router-cli

1.166.46, 1.166.49

npm

@tanstack/arktype-adapter

1.166.12, 1.166.15

npm

@tanstack/vue-router-devtools

1.166.16, 1.166.19

npm

@tanstack/zod-adapter

1.166.12, 1.166.15

npm

@tanstack/vue-router-ssr-query

1.166.15, 1.166.18

npm

@tanstack/start-static-server-functions

1.166.44, 1.166.47

npm

@tanstack/router-vite-plugin

1.166.53, 1.166.56

npm

@tanstack/valibot-adapter

1.166.12, 1.166.15

npm

@tanstack/router-devtools

1.166.16, 1.166.19

npm

intercom-client

7.0.4

npm

@cap-js/db-service

2.10.1

npm

@cap-js/postgres

2.2.2

npm

@cap-js/sqlite

2.2.2

npm

mbt

1.2.48

npm

intercom/intercom-php

5.0.2

composer

guardrails-ai

0.10.1

PyPi

lightning

2.6.2 - 2.6.3

PyPi

mistralai

2.4.6

PyPi

Sources