TL; DR
Ngomhla we-14 kweyoMsintsi 2025, abaphandi bafumanise Shai Hulud, imbungu eziphindaphindayo efihliweyo ngaphakathi iipakethe ze-npm, ukuguqula uhlaziyo oluqhelekileyo lokuxhomekeka lube luluhlu olupheleleyo uhlaselo lwekhonkco lokubonelelaKubonwe okokuqala kwi @ctrl/tinycolor iphakheji kaDaniel dos Santos Pereira, uShai-Hulud uqokelela iimfihlo, azikhuphe ngee-repos zeGitHub kunye neendlela zokusebenza, aze azipapashe kwakhona kwirejistri esebenzisa iziqinisekiso ezibiweyo. Kwiintsuku ezimbalwa, inani leephakheji ezinegciwane landa ukusuka kumashumi ukuya kumakhulu, liqinisekisa ukuba UShaihulud ayisiyonto nje enye itrojan kodwa yimbungu eyenzelwe ukusasazeka ngokuzenzekelayo kuyo yonke inkqubo ye-npm.
Impact: Nawuphi na umphuhlisi okanye umgijimi we-CI ofaka iipakeji zikawonke-wonke ze-npm usemngciphekweni.
Izenzo kwangoko: vimba iinguqulelo ezaziwayo, tshintshela kwi-lockfile-only installs, jikelezisa i-npm kunye ne-GitHub token, i-audit workflows, kwaye ujonge i-Indicators of Compromise (IoCs).
Kwenzekani?
The Uhlaselo lwekhonkco lokubonelela ngeShai-Hulud kwiiphakheji ze-npm yenye yezona ziganeko ziphazamisayo kakhulu kwinkumbulo yakutshanje. Ngokungafaniyo neetrojan ezizimeleyo, le mbungu iyaxubana ubusela beziqinisekiso, ukukhupha ulwazi ngokuzenzekelayo, kunye nokuziphindaphindaNgenxa yoko, ixesha losulelo lancipha ukusuka kwiiveki ukuya kwiiyure nje ezimbalwa.
Kumaqela eDevOps, isifundo sicacile: ukuba yonke ifakelo inokwenza ikhowudi, ngoko ke lonke uhlaziyo lokuxhomekeka lunokuba yindawo yokwaphulwa komthetho.
I-Vector yokuqala enokwenzeka kunye neziqinisekiso ezijoliswe kuzo
Uhlalutyo lwasekuqaleni ibonisa ukuba uhlaselo lusenokuba lwaqala ngo iziqinisekiso ezibiweyoUmzekelo, iiphulo zobugebengu bokweba idatha zikhohlisa i-npm login okanye izikhokelo ze-MFA zisenokuba zibambe amathokheni omphuhlisi. Nje ukuba abahlaseli bafumane indawo yokuqala, i-worm yasasazeka ngokuzifaka kwiiphakheji ze-npm kwaye yeba ezinye iimfihlo ku:
- iifayile zoqwalaselo lwe-npm ezifana
.npmrc, idla ngokuqulatha iithokheni zokupapasha. - Izinto eziguquguqukayo kwimeko-bume kwaye icwangcisa nge-GitHub PATs kunye CI/CD iimfihlo.
- Iiphelo zemetadata yelifu (AWS, GCP, Azure) zinika iziqinisekiso zexesha elifutshane zokunyakaza ecaleni.
Ngoko ke, ubusela beenkcukacha zaba yindawo yokuqalisa. Ngee-token ze-npm ezisebenzayo kunye neemfihlo zeGitHub, uShai-Hulud wayenokuziphinda-phinda kwiipakeji ezininzi nakwiindawo zokugcina idatha ngaphandle komzamo womntu.
Impembelelo yoLawulo yoHlaselo lweShai-Hulud Supply Chain
UShai-Hulud usasebenza nanamhlanje. Le mbungu ikhawulezisa ixesha lokubetha. Oko kwakuthatha iiveki ngetrojan ngoku kuvela kwiiyure. Ngenxa yoko, ukusasazeka kwayo kuyakhawuleza kwaye kunzima ukuyilawula. Iqhubela phambili nge:
- Ukubiwa kwe-npm publish tokens kunye neemfihlo zeGitHub.
- Ukuzipapasha kwakhona kwezinye iipakeji ze-npm.
- Ukongeza imisebenzi yeGitHub Actions enobungozi ukuze uqhubeke.
Ngubani ochaphazelekayo:
Naliphi na iqela elifaka iipakethe zikawonke-wonke ze-npm liyavezwa. Ngaphezu koko, abaphuhlisi abaneethokheni ze-npm okanye ze-GitHub ezigciniweyo bajongene nomngcipheko omkhulu. Abagijimi be-CI abasebenzisa iimfihlo ezibanzi nabo basengozini.
Umngcipheko weshishini
Impembelelo yeshishini ikhula ngokukhawuleza. Iithokheni ezibiweyo zinokukhokelela ekuthathweni kweakhawunti, ukubiwa kweepakethe, kunye nokusetyenziswa gwenxa kwamafu. Ukongeza, ukuqhubeka kwemisebenzi yeGitHub kwenza kube nzima ukuyicoca., amaqela kufuneka aphathe uShai-Hulud njengesiganeko esiqhubekayo, kungekhona esokuvala.
Indlela uHlaselo lweShai-Hulud Supply Chain olusebenza ngayo kwiiphakheji ze-npm
Iinjongo kunye nenjongo yomhlaseli
Le phulo ilungiselela izinto ezintathu:
- Injongo yokuqala kuku yeba iziqinisekiso ngobukhulu ukusuka kwiilaptops zomphuhlisi kunye nee-CI runners. Oku kuquka ii-npm publish token, ii-GitHub token, kunye nee-cloud credentials. Enyanisweni, uhlalutyo oluninzi luqinisekisa ukuvuna okuyimfihlo okucwangcisiweyo, njengokusebenzisa iTruffleHog kunye nokubuza ii-endpoints ze-metadata yelifu.
- Injongo yesibini kukwenza sasaza ngokuzenzekelayo ngokusebenzisa kakubi amalungelo okupapasha abagcini abasengozini. Ngenxa yoko, indawo enye ikhawuleza ifikelele kwiindawo ezininzi, kuba iinguqulelo ezintsha ezinentsholongwane zezinye iipakeji zivela ngaphandle komzamo owongezelelweyo womntu.
- Injongo yesithathu kukuba ziyaqhubeka kwaye ziphume ngokuthembekileyo ngokusebenzisa iziseko zeGitHub. Abahlaseli benza indawo yokujongwa yoluntu ebizwa ngokuba yi-“Shai-Hulud” enesiseko esiphindwe kabini64 idatha.json, kwaye ukongeza batyala umsebenzi ohamba ngokulandelelana ${{ toJSON(secrets) }} kwaye uyithumela kwi-webhook engashukumiyo.
Inzuzo enokubakho ibandakanya ukufikelela ixesha elide kwiirejista kunye nekhowudi yomthombo, ukuhamba ngokukhawuleza kwiiakhawunti zelifu, kunye nokukhetha ukusebenzisa isixhobo sokuhambisa ngakumbi. Ingxelo kawonke-wonke ibonisa ukuba ii-repos zabucala zidluliselwe kuluntu nge "-ukufuduka" isimamva, esongeza ukuvezwa kwedatha kunye nomfutho wayo
Ngaphakathi kwiShai-Hulud Payload: Bundle.js kwiiphakheji ze-npm
Iinqanawa zikaShai-Hulud njenge inkulu, ipakishwe ngeWebpack kwaye incitshiswe kakhulu Ifayile yeJavaScript (Bundle.js, malunga ne-3–3.7 MB) ephumeza ukusuka kwi postinstall faka ngaphakathi iphakheji.jsonNgenxa yoko, Ufakelo ngalunye luqalisa umthwalo ngokuzenzekelayo. Olu yilo lufihla izihlonzi, lucinezela ukuhamba kolawulo, kwaye lutyhala yonke ingqiqo kwi-artifact enye esebenza ngexesha lokufakwa. Abahlalutyi bahlala beqinisekisa ukuhlanganiswa kweWebpack, ubungakanani befayile obungaqhelekanga, kunye nokusebenza kwexesha lokufakwa.
Iimpawu zokungacaci kakuhle kunye nokuchasana nohlalutyo oza kuzibona kwiisampuli:
- Igrafu yemodyuli encinci ngee-ID zemodyuli zamanani, izimvo ezimfutshane, kunye nokuhamba kolawulo oluthe tyaba., Olu lwakhiwo lwenza ukuba uphononongo olwenziwe ngesandla lube nzima kakhulu.
- Ukufihla intambo ngokusebenzisa iileya zesiseko64 kunye nezixhobo zokwakha. Umzekelo, Ukuphinda-phinda ukufowuna kunye nokucacisa i-base64 kudla ngokuvela kwiinkqubo zokuphuma kwe-exfiltration.
- Ukuthunyelwa okuguqukayo ngokusebenzisa eval-iipateni zesitayile kunye nemizimba yomsebenzi evelisiweyo, ngoko ke ivumela ikhowudi ukuba itshintshe indlela yokuziphatha ngexesha lokusebenza.
- Ukucoca i-OS ukukhetha ukwenziwa kweLinux kunye ne-macOS ngakumbi kwii-CI runners kunye neelaptops zabaphuhlisi.
Ukusuka kwikona esebenzayo, i-bundle ikwimodular. Ii-Writeups zichaza iimodyuli zokufumanisa i-OS, inkqubo yefayile kunye ne-git secret scans, ukufikelela kwi-cloud SDK, imisebenzi ye-GitHub API, kunye ne-propagation ehlela ezinye iipakeji eziphethwe ngumlondolozi. Enyanisweni, i-StepSecurity kunye ne-ReversingLabs zombini zigxininisa umsebenzi ohlaziya ngokuzenzekelayo iipakeji nge-malicious hook.
Ukuphunyezwa kwexesha lokufaka kwiShai-Hulud: Indlela iipakeji ze-npm ezibangela ngayo iWorm
Uhlaselo luqala xa i-postinstall isebenzisa i-node Bundle.js. Kule ndawo, iskripthi siqala kwaye sivule imeko yokusebenza kwimemori, sibeka inqanaba lokusebenza ngokupheleleyo kwe-worm.
Ukufunyanwa kunye nokuvuna
- I-payload dumps process.env kwaye iskena iifayile zasekuhlaleni ukuze zifumane iimfihlo ze-entropy eziphezulu kunye neziqalo ze-token. Ukongeza, yandisa ukhuseleko ngokusebenzisa iTruffleHog.
- Ibuza ngeenkcukacha ze-cloud metadata ukuze iqokelele iziqinisekiso zexesha elifutshane. Njengokuba, ubiza ku
169.254.169.254kwi-AWS okanyemetadata.google.internalkwi-GCP idla ngokubonakala kwiindawo ezinesi sifo. - Ngenxa yoko, Nasiphi na isiqinisekiso esifunyenweyo sisebenziseka ngoko nangoko ukupapasha iipakeji ezintsha ze-npm okanye ukutyhala imisebenzi yeGitHub.
Exfiltration
- Impethu idala i-repo entsha yeGitHub ebizwa ngokuba yi Shai Hulud kwaye ubhala i-double base64-encoded
data.jsonngeenkcukacha zeqonga, iindawo zokulahla inkunkuma, kunye neemfihlo. Njengoko kunokubonwa, le ndlela ingxolo kulula ukuyibona ukuba abakhuseli bayazi apho bafanele bajonge khona. - Ikwatyala indlela yokusebenza yeGitHub Actions, rhoqo kwisebe elibizwa ngokuba yi shai-hulud, oko kulandelelanisa
${{ toJSON(secrets) }}kwaye ithumela idatha kwi-webhook engashukumiyo. Ngaphezu koko, olu hambo luyaqhubeka de kubekho umntu oyisusayo.
Ukusasazeka
- Ngayo nayiphi na i-token ye-npm efunyenweyo, i-payload ibala zonke iipakeji ezizezomgcini-nkqubo ochaphazelekileyo. Emva koko, ithatha i-tarball nganye, ifake i-bundle.js kunye nokungena kwe-postinstall, kwaye iphinde ipapashe ipakeji.
- Ngenxa yoko, iipakethe ezininzi ezinentsholongwane zinokuvela kwisithuba seeyure ezimbalwa, ziphindaphinde umda wokuqhuma kuyo yonke inkqubo yendalo.
Ukunyamezela kunye nokuvezwa
I-worm igcina imisebenzi enobungozi iphila, kwaye kwiimeko ezininzi, iguqula ii-repos zabucala ziye kuluntu nge "-ukufuduka" isimamva. Lilonke, oku kuqinisekisa ukuba umhlaseli ugcina indawo yakhe kwaye kwandisa ukuvuza kwedatha.
Inqaku lokuchongwa kwesitshixo
Olu setyenziso olungaqhelekanga ${{ toJSON(secrets) }} kwi-Actions imisebenzi inqabile. Ngoko ke, amaqela afanele ayiphathe njengesalathisi esibonakalayo ngexesha lokuzingela.
Ipateni yokusebenza ecocekileyo ekufuneka uyikhangele
Olu setyenziso olungaqhelekanga ukuba I-JSON (iimfihlo) kwi-Actions luphawu oluphezulu kwesi siganeko.
Ikhowudi-pseudo yokusasazwa kwinqanaba eliphezulu (ikhuselekile, ichazayo)
Abahlalutyi balubonile olu luhlu ngomlinganiselo, oluchaza ukunyuka okukhawulezayo ukusuka kwishumi ukuya kumakhulu eepakethe ezinentsholongwane.
Kutheni le nto ingumbungu kwiphakheji yendalo
I-worm yi-malware esasazeka yodwa ngaphandle kokufuna amanyathelo omqhubi ngesandla kuzo zonke izigaba. Kwiinkqubo zokusebenza, ii-worms zihlala zisebenzisa ubuthathaka benethiwekhi ukuze zisuke kwenye imashini ziye kwenye. Ngokwahlukileyo koko, iShai-Hulud isebenza ngaphakathi kwirejista ye-npm. Indlela yayo esebenzayo kukudlula ukusetyenziswa kwakhona kweziqinisekiso.
I-worm isebenzisa ii-token ze-npm publish ezibiweyo. Nje ukuba ifumane iziqinisekiso ezisemthethweni, iphinda ipapashe iinguqulelo ezinegciwane phantsi kwezinye iipakethi eziphethwe ngumgcini ofanayo. Emva koko, ezo pakethi zifakwa ngabaphuhlisi abangalindelanga okanye abagijimi be-CI, kwaye umjikelo uphinda.
Ngenxa yesi sizathu, abahlalutyi bezokhuseleko, kuquka Ukufunda okumnyama, hlela uShai-Hulud njenge impethu eziphindaphindayo endaweni yetrojan nje okanye isiganeko sokubhala amagama. Umahluko ubalulekile: itrojan idla ngokubeka emngciphekweni omnye kumninimzi, kodwa umbungu uyandisa impembelelo yawo ngokuzenzekelayo kuyo yonke inkqubo yendalo.
Iphepha lokukhohlisa elithi "Isebenza njani"
Ukushwankathela ubomi bukaShai-Hulud, nantsi ingcebisocisuhlalutyo lwamanyathelo ayo aphambili:
- Iphakheji ene postinstall ifakiwe, kwaye
bundle.jsuyayiphumeza. - I-payload dumps iguqula imeko-bume, iskena iifayile kunye nembali ye-git, isebenza TruffleHog, kwaye ibuza ngeenkonzo ze-database yelifu. Ngenxa yoko, nayiphi na imfihlo efunyenweyo iba luncedo ngoko nangoko.
- Ukuphuma kwenzeka ngeendlela ezimbini: okokuqala, ngokudala i-repo kawonke-wonke ebizwa ngokuba yi- Shai Hulud ene-double base64-encoded
data.jsonokwesibini, ngokutyala umsebenzi weGitHub Actions othumela izithuba${{ toJSON(secrets) }}kwi-webhook. - Isebenzisa nayiphi na ithokheni ye-npm ebiweyo, i-worm iphinda ipapashe zonke ezinye iipakeji eziphethwe ngumgcini-nkqubo ochaphazelekileyo nge-hook efanayo enobubi. Ngale ndlela, usulelo luyanda ngokukhawuleza.
- Ekugqibeleni, umhlaseli ugcina iimfihlo ezingaphezulu, iipakethe ezininzi ekufuneka azisasaze, kwaye ukuzingisa ngaphakathi kweeakhawunti zeGitHub kunye neendawo zokugcina.
Indlela yokuphepha olu hlobo lohlaselo, ngokoqobo
UShai-Hulud uyindlela yokuvusa umntu. Impethu eba iithokheni ize izipapashe kwakhona ayisiyongozi yexesha elizayo, iyasebenza kwi-intanethi. iiphakheji ze-npm namhlanje. Ukuthintela olu hlobo lwe uhlaselo lwekhonkco lokubonelelaamaqela afuna ulawulo olucwangcisiweyo, oluzenzekelayo, nolusetyenziswa ngokuthe ngqo kwi CI/CD pipelines. Ezi zizinto ezifanayo zokuzikhusela onokuthi uzisebenzise I-Xygeni.
Misa izinto ezimbi ezisetyenzisiweyo esangweni
Kuya kufuneka uskene iipakeji ze-npm kunye nee-tarball ngaphambi kokuba zifikelele kubaphuhlisi okanye kwimisebenzi ye-CI. bundle.js iifayile, ukufakwa emva kokukrokrela okungathandabuzekiyo hooks, kunye neempawu zokungabonakali zonke zisebenza njengeeflegi zokuqala ezibomvu. Ngaphezu koko, ukunyanzelisa amaxesha okuphola kunye neenguqulelo ezichongiweyo kwi pipelines ithintela ukukhutshwa okutsha, okungavavanywanga ukuba kusetyenziswe ngokuzenzekelayo.
Ekhuselekileyo CI/CD ngokuzenzekela
Guardrails in CI/CD zibalulekile. Bayala ukuhlanganiswa okanye ukufakwa okwazisa izikripthi ezintsha okanye ii-binary. Kwangaxeshanye, bavimba imisebenzi elandelelanisa iimfihlo okanye bazama izithuba zangaphandle. Amaqela kufuneka afune ukufakwa kwefayile yokutshixa kuphela (npm ci) kuzo zonke pipelinengoko ke iiseti zokuxhomekeka zihlala ziphinda-phinda kwaye zikhuselekile.
Nciphisa irediyasi yokuqhuma kwethokheni
Iimfihlo akufuneki zibe yindawo enye yokusilela. Qhubeka uskena ikhowudi, ulungiselelo, kunye pipeline imveliso ye iziqinisekiso eziveziweyoIithokheni kufuneka zibekwe kancinci, zinikwe ubomi obufutshane, kwaye zijikeleziswe ngokuzenzekelayo xa kufunyenwe ukuvezwa. Ngokwesiqhelo, phatha nayiphi na ithokheni esetyenziswe kwi-host eyenze i-postinstall ekrokrisayo njengesengozini.
Jonga indlela eziziphatha ngayo iintshulube kwangethuba
Ukufunyaniswa okungaqhelekanga kubalulekile. Umzekelo, ukunyuka ngequbuliso kwi-npm publish events, imisebenzi emitsha ebonakala ngaphandle kwesizathu, okanye ii-repos zikawonke-wonke ezizaliswe ziifayile ezingaqhelekanga ezifakwe kwiikhowudi zinokubonisa umsebenzi we-worm. Ke ngoko, amaqela kufuneka aphakamise izilumkiso ngokukhawuleza aze ahlukanise nabaphi na abagcini okanye abagijimi ababonisa ezi mpawu zesilumkiso.
Lungisa ngokukhawuleza ngaphandle kokwaphula izakhiwo
Isantya nokhuseleko kufuneka zihambelane. pull requests inokutshintsha iipakeji ze-npm ezichaphazelekileyo ngeenguqulelo ezivavanyiweyo. Ukongeza, ukufikelela kwaye ukuxhaphaza Uhlalutyo luqinisekisa ukuba ukuphuculwa kuhlala kuncinci kwaye kuzinzile. Okokugqibela, yakha kwakhona abagijimi be-CI abachaphazelekayo kwimifanekiso ecocekileyo xa sele kuqinisekisiwe ukuba uhlaselo luchanekile, nto leyo ethintela uhlaselo ukuba lungasasazeki ngakumbi.
Iimpawu zeCompromise (IoCs)
Xa kuhlalutywa uShai-Hulud, amaqela kufuneka ajonge zombini ii-IoCs ezingaguqukiyo kwiifayile kunye ii-IoC zokuziphatha in pipelines. Xa zizonke, ezi mpawu zinceda ekufumaneni usulelo kwangethuba kwaye ziphendule ngaphambi kokuba intshulube isasazeke ngakumbi.
Ii-IoC eziNgaguqukiyo
Ukuhambelana okulandelayo kwe-SHA-256 kubonwe bundle.js iisampulu:
- 46faab8ab153fae6e80e7cca38eab363075bb524edd79e42269217a083628f09
- 81d2a004a1bca6ef87a1caf7d0e0b355ad1764238e40ff6d1b1cb77ad4f595c3
- dc67467a39b70d1cd4c1f7f7a459b35058163592f4a9e8fb4dffcbba98ef210c
Ukongeza, jonga ezi patheni eziphindaphindayo:
- A
bundle.jskwingcambu yepakeji. "postinstall": "node bundle.js"ngaphakathipackage.json.- Iindawo zokugcina izinto ezibizwa ngamagama Shai Hulud.
- Imisebenzi yeGitHub equlethe
${{ toJSON(secrets) }}.
Ii-IoC zokuziphatha
Ngaphaya kweempawu zefayile, umsebenzi we-worm uzityhila ngokuziphatha. Umzekelo:
- Ukuqhuma ngequbuliso kwe-npm kupapasha iziganeko ezivela komnye umgcini-zincwadi.
- Iindlela ezintsha zokusebenza ezityhala idatha kwiindawo zokugqibela zangaphandle.
- Izicelo zePOST eziphumayo ziqaliswe ngabagijimi beCI.
- Kutshanje kwenziwe ii-repos zikawonke-wonke ezinee-blocks ezifihliweyo.
Ukuzingela ngokukhawuleza
Isiphelo: Izifundo ezivela kuShai-Hulud
The Uhlaselo lwe-Shai-Hulud kwiiphakheji ze-npm zibonisa indlela olubuthathaka ngayo uthotho lwesoftware yanamhlanje. Le mbungu yenze okungaphezulu kokongeza ikhowudi enobungozi. Yeba amathokheni, yathumela idatha, yaza yazipapasha kwakhona ngokuzenzekelayo. Ngenxa yoku, uhlaselo lwasasazeka kwiiyure endaweni yeeveki.
Kubaphuhlisi kunye namaqela eDevOps, izifundo zicacile:
- Yonke ifakelo isebenzisa ikhowudi. Kwanephakheji eqhelekileyo ye-npm inokufihla i-postinstall worm.
- Ithokheni nganye inexabiso eliphezulu. Nje ukuba ibiwe, ingasetyenziselwa ukusasaza i-malware ngakumbi.
- wonke pipeline kufuneka itshekhi. ngaphandle guardrails malunga nokuxhomekeka, iindlela zokusebenza, kunye neemfihlo, isivumelwano esinye sinokukhawuleza sichaphazele imveliso.
Ngoko ke, ukuyeka uhlaselo olufana noShai-Hulud kufuna ulawulo oluzenzekelayo nolulula ukulusebenzisa. Amaqela kufuneka askene iipakeji ze-npm ngaphambi kokufaka, asebenzise ulwakhiwo lwefayile yokukhiya, abone umsebenzi ongaqhelekanga wokupapasha, kwaye agcine amathokheni ehlala ixesha elifutshane. La manyathelo awasanyanzelekanga. Endaweni yoko, asisiseko sokuqina kwimihla yanamhlanje. pipelines.
Apha eXygeni, sibona uhlaselo lwe-Shai-Hulud supply chain njengesilumkiso kuyo yonke inkqubo yendalo evulelekileyo. Indlela ezinzileyo yokuya phambili kukuzisa ukhuseleko lwe-supply chain ngqo kwinkqubo yophuhliso, kwindawo apho ikhowudi, iipakeji ze-npm, kunye pipelineqhagamshela.
Apha ngezantsi kukho uluhlu olupheleleyo lweepakeji ze-npm kunye neenguqulelo ezixelwe njengezichaphazelekileyo kwiShai-Hulud. Yisebenzise ukujonga iifayile zakho zokutshixa, iirejista, kunye ne-CI pipelines yokuvezwa.
Uluhlu lweepakeji ezisengozini
📦 Imbonakalo yangaphambili yeePakeji ze-npm eziphazamisekileyo
| Igama lepakheji | inguqulelo | Papasha uMhla |
|---|---|---|
| i-json-rules-injini-eyenziwe lula | 0.2.1 | 2025-09-14T17:58:51.203Z |
| umqhubi wenqwelo-moya | 0.8.8 | 2025-09-14T18:35:07.600Z |
| igrafu yolwazi lwe-mcp | 1.2.1 | 2025-09-14T18:35:09.494Z |
| intloko yomoya | 0.3.1 | 2025-09-14T18:35:09.521Z |
| isango lokutsiba | 0.0.2 | 2025-09-14T18:35:09.651Z |
| i-tvi-cli | 0.1.5 | 2025-09-14T18:35:10.996Z |
| @thangved/callback-window | 1.1.4 | 2025-09-14T20:31:38.479Z |
| @tnf-dev/api | 1.0.8 | 2025-09-14T20:31:39.547Z |
| @tnf-dev/js | 1.0.8 | 2025-09-14T20:31:41.251Z |
| @tnf-dev/mui | 1.0.8 | 2025-09-14T20:31:41.259Z |
| @tnf-dev/core | 1.0.8 | 2025-09-14T20:31:42.728Z |
| @teselagen/itafile yokusabela | 6.10.20 | 2025-09-14T20:37:08.597Z |
| @hestjs/demo | 0.1.2 | 2025-09-14T20:45:52.348Z |
| @nexe/eslint-config | 0.1.1 | 2025-09-14T20:45:53.625Z |
| @hestjs/eslint-config | 0.1.2 | 2025-09-14T20:45:55.044Z |
| @nexe/config-manager | 0.1.1 | 2025-09-14T20:45:55.066Z |
| @nexe/logger | 0.1.3 | 2025-09-14T20:45:55.170Z |
| @hestjs/logger | 0.1.6 | 2025-09-14T20:45:55.197Z |
| @hestjs/ukuqinisekiswa | 0.1.6 | 2025-09-14T20:45:55.595Z |
| @hestjs/core | 0.2.1 | 2025-09-14T20:45:55.888Z |
➡️ Jonga uluhlu olupheleleyo lweepakeji ezichaphazelekileyo
| Igama lepakheji | inguqulelo | Papasha uMhla |
|---|---|---|
| i-json-rules-injini-eyenziwe lula | 0.2.1 | 2025-09-14T17:58:51.203Z |
| umqhubi wenqwelo-moya | 0.8.8 | 2025-09-14T18:35:07.600Z |
| igrafu yolwazi lwe-mcp | 1.2.1 | 2025-09-14T18:35:09.494Z |
| intloko yomoya | 0.3.1 | 2025-09-14T18:35:09.521Z |
| isango lokutsiba | 0.0.2 | 2025-09-14T18:35:09.651Z |
| i-tvi-cli | 0.1.5 | 2025-09-14T18:35:10.996Z |
| @thangved/callback-window | 1.1.4 | 2025-09-14T20:31:38.479Z |
| @tnf-dev/api | 1.0.8 | 2025-09-14T20:31:39.547Z |
| @tnf-dev/js | 1.0.8 | 2025-09-14T20:31:41.251Z |
| @tnf-dev/mui | 1.0.8 | 2025-09-14T20:31:41.259Z |
| @tnf-dev/core | 1.0.8 | 2025-09-14T20:31:42.728Z |
| @teselagen/itafile yokusabela | 6.10.20 | 2025-09-14T20:37:08.597Z |
| @hestjs/demo | 0.1.2 | 2025-09-14T20:45:52.348Z |
| @nexe/eslint-config | 0.1.1 | 2025-09-14T20:45:53.625Z |
| @hestjs/eslint-config | 0.1.2 | 2025-09-14T20:45:55.044Z |
| @nexe/config-manager | 0.1.1 | 2025-09-14T20:45:55.066Z |
| @nexe/logger | 0.1.3 | 2025-09-14T20:45:55.170Z |
| @hestjs/logger | 0.1.6 | 2025-09-14T20:45:55.197Z |
| @hestjs/ukuqinisekiswa | 0.1.6 | 2025-09-14T20:45:55.595Z |
| @hestjs/core | 0.2.1 | 2025-09-14T20:45:55.888Z |
| @hestjs/cqrs | 0.1.6 | 2025-09-14T20:45:55.966Z |
| @hestjs/scalar | 0.1.7 | 2025-09-14T20:45:56.386Z |
| ukulayisha iifayile ze-ng2 | 7.0.3 | 2025-09-15T02:44:29.555Z |
| umphathi wesaziso se-capacitor | 0.0.2 | 2025-09-15T04:54:48.431Z |
| i-capacitor-plugin-vonage | 1.0.2 | 2025-09-15T04:54:48.501Z |
| i-capacitor-plugin-healthapp | 0.0.2 | 2025-09-15T04:54:48.704Z |
| iimvume ze-capacitorandroid | 0.0.4 | 2025-09-15T04:54:48.753Z |
| ikhithi yokufowunela nge-voip | 1.0.2 | 2025-09-15T04:54:49.223Z |
| i-capacitor-plugin-ihealth | 1.1.8 | 2025-09-15T04:55:08.113Z |
| @art-ws/common | 2.0.22 | 2025-09-15T05:21:15.411Z |
| @art-ws/config-eslint | 2.0.4 | 2025-09-15T05:21:17.199Z |
| ngx-ws | 1.1.5 | 2025-09-15T05:21:17.514Z |
| @art-ws/slf | 2.0.15 | 2025-09-15T05:21:17.524Z |
| @art-ws/http-server | 2.0.21 | 2025-09-15T05:21:17.745Z |
| pm2-gelf-json | 1.0.4 | 2025-09-15T05:21:18.413Z |
| @art-ws/di | 2.0.28 | 2025-09-15T05:21:18.488Z |
| @art-ws/di-node | 2.0.13 | 2025-09-15T05:21:18.849Z |
| @art-ws/config-ts | 2.0.7 | 2025-09-15T05:21:19.408Z |
| @ubugcisa-ws/db-umxholo | 2.0.21 | 2025-09-15T05:21:19.814Z |
| @art-ws/openapi | 0.1.9 | 2025-09-15T05:21:19.969Z |
| @art-ws/web-app | 1.0.3 | 2025-09-15T05:21:20.383Z |
| @ubugcisa-ws/ulwazi-lwe-ssl | 1.0.9 | 2025-09-15T05:21:20.927Z |
