TL; DR
NgoSepthemba 14, 2025, abacwaningi bathola Shai Hulud, isibungu esiziphindaphindayo esifihliwe ngaphakathi amaphakheji e-npm, ukuguqula isibuyekezo sokuthembela esijwayelekile sibe yisilinganiso esigcwele ukuhlaselwa kwe-supply chainKuqale ukubonwa ku- @ctrl/tinycolor Iphakheji kaDaniel dos Santos Pereira, uShai-Hulud uqoqa izimfihlo, azikhiphe ngama-repos e-GitHub kanye nemisebenzi yokusebenza, futhi azishicilele kabusha kulo lonke irejista esebenzisa iziqinisekiso ezibiwe. Ezinsukwini ezimbalwa, inani lamaphakheji athelelekile lenyuke lisuka emashumini amaningi laya emakhulwini, okuqinisekisa ukuthi UShaihulud akuyona nje enye i-trojan kodwa iyisibungu esenzelwe ukusabalala ngokuzenzakalelayo kuyo yonke indawo ye-npm.
Impembelelo: Noma yimuphi umthuthukisi noma umgijimi we-CI ofaka amaphakheji e-npm omphakathi usengozini.
Izenzo ezisheshayo: vimba izinguqulo ezaziwayo, shintshela ekufakweni kwe-lockfile kuphela, ujikeleze amathokheni e-npm kanye ne-GitHub, imisebenzi yokuhlola, kanye nokuqapha izinkomba zokuyekethisa (ama-IoC).
Kwenzekeni?
The Ukuhlaselwa kwe-Shai-Hulud supply chain kumaphakheji e-npm ingenye yezehlakalo eziphazamisa kakhulu ezikhumbuzweni zakamuva. Ngokungafani nama-trojan ahlukene, le nyoni iyaxubana ukwebiwa kweziqinisekiso, ukukhishwa okuzenzakalelayo, kanye nokuzikopisha ngokwakhoNgenxa yalokho, isikhathi sokutheleleka sancipha sasuka emavikini saba amahora ambalwa nje.
Kumaqembu e-DevOps, isifundo sicacile: uma konke ukufakwa kungenza ikhodi isebenze, khona-ke konke ukubuyekezwa kokuthembela kuyindawo engaba khona yokwephulwa.
I-Vector yokuqala engaba khona kanye neziqinisekiso eziqondiwe
Ukuhlaziywa kwasekuqaleni kubonisa ukuthi ukuhlasela kungenzeka kwaqala ngo iziqinisekiso ezintshontshiweIsibonelo, imikhankaso yobugebengu bokweba imininingwane ebucayi i-npm login noma izixwayiso ze-MFA kungenzeka ukuthi zibambe amathokheni onjiniyela. Lapho abahlaseli sebethole indawo yokuqala, i-worm yasakazeka ngokuzifaka kumaphakheji e-npm futhi yeba izimfihlo ezengeziwe ku:
- amafayela wokuhlela we-npm like
.npmrc, ngokuvamile equkethe amathokheni okushicilela. - Okuguquguqukayo kwemvelo futhi ilungiselela nge-GitHub PATs kanye CI/CD izimfihlo.
- Ama-endpoints emetadata yamafu (AWS, GCP, Azure) okunikeza iziqinisekiso zesikhashana zokunyakaza ohlangothini.
Ngakho-ke, ukwebiwa kwemininingwane kwaba yindawo yokuqalisa. Ngamathokheni e-npm asebenzayo kanye nezimfihlo ze-GitHub, i-Shai-Hulud yayingazikopisha ngokwayo kumaphakheji amaningi kanye nasezindaweni zokugcina ngaphandle komzamo owengeziwe womuntu.
Umthelela Wabaphathi Wokuhlaselwa Kwe-Shai-Hulud Supply Chain
I-Shai-Hulud isasebenza nanamuhla. Lesi sibungu sisheshisa isikhathi sokushaya. Lokho okwake kwathatha amasonto nge-trojan manje sekwenzeka ngamahora. Ngenxa yalokho, ukusabalala kuyashesha futhi kunzima ukukulawula. Ithuthuka nge:
- Ukweba amathokheni okushicilela i-npm kanye nezimfihlo ze-GitHub.
- Ukuzishicilela kabusha kwamanye amaphakheji e-npm.
- Ukwengeza imisebenzi ye-GitHub Actions enonya ukuze uqhubeke.
Obani abathintekayo:
Noma yiliphi iqembu elifaka amaphakheji e-npm omphakathi liyadalulwa. Ngaphezu kwalokho, abathuthukisi abanamathokheni e-npm noma e-GitHub agciniwe babhekene nengozi enkulu. Abagijimi be-CI abasebenzisa izimfihlo ezibanzi nabo basengozini.
Ingozi yebhizinisi
Umthelela webhizinisi ukhula ngokushesha. Amathokheni ebiwe angaholela ekuthathweni kwe-akhawunti, ukuntshontshwa kwamaphakheji, ngisho nokusetshenziswa kabi kwamafu. Ngaphezu kwalokho, ukuphikelela emisebenzini ye-GitHub kwenza kube nzima ukuyihlanza. Ngakho-ke, amathokheni ebiwe angaholela ekuthathweni kwe-akhawunti, ukuntshontshwa kwamaphakheji, kanye nokusetshenziswa kabi kwamafu. Ngaphezu kwalokho, ukuqhubeka kokusebenza kwe-GitHub kwenza kube nzima ukuwahlanza., amaqembu kumele aphathe iShai-Hulud njengesigameko esiqhubekayo, hhayi esivaliwe.
Indlela Ukuhlasela Kwe-Shai-Hulud Supply Chain Okusebenza Ngayo Kumaphakheji e-npm
Izinhloso kanye nesisusa somhlaseli
Lo mkhankaso ulungiselela izinto ezintathu:
- Inhloso yokuqala iwukuba ukweba iziqinisekiso ngezinga kusuka kuma-laptop onjiniyela kanye nama-CI runners. Lokhu kufaka phakathi ama-npm publish token, ama-GitHub token, kanye neziqinisekiso zamafu. Eqinisweni, ukuhlaziywa okuningi kuqinisekisa ukuqoqwa okuyimfihlo okuhlelekile, njengokusebenzisa i-TruffleHog kanye nokubuza ama-endpoints e-metadata yamafu.
- Inhloso yesibili iwukuba sakazeka ngokuzenzakalelayo ngokusebenzisa kabi amalungelo okushicilela abanakekeli abasengozini. Ngenxa yalokho, indawo eyodwa ikhula ngokushesha ibe yiningi, njengoba izinguqulo ezintsha ezinegciwane zamanye amaphakheji zivela ngaphandle komzamo owengeziwe womuntu.
- Inhloso yesithathu iwukuba qhubeka futhi uphume ngokwethembeka ngokusebenzisa ingqalasizinda ye-GitHub. Abahlaseli bakha indawo yomphakathi ebizwa ngokuthi “i-Shai-Hulud” enesisekelo esiphindwe kabili64 idatha.json, futhi ngaphezu kwalokho batshala umsebenzi ohlela ngokulandelana ${{ toJSON(secrets) }} bese uyithumela ku-webhook engaguquki.
Inzuzo engaba khona ihlanganisa ukufinyelela okuhlala isikhathi eside kumarejista kanye nekhodi yomthombo, ukunyakaza okusheshayo okusemaceleni kuma-akhawunti efu, kanye nenketho yokusebenzisa iketanga lokuhlinzeka ngezikhali ngokwengeziwe. Ukubika komphakathi kubonisa ukuthi izindawo zokugcina ezizimele zidluliselwe emphakathini nge "-ukufuduka" isijobelelo, okwandisa ukuchayeka kwedatha kanye nomfutho
Ngaphakathi komthwalo we-Shai-Hulud: bundle.js kumaphakheji e-npm
Imikhumbi ye-Shai-Hulud njenge- enkulu, ihlanganiswe nge-Webpack futhi incishisiwe kakhulu Ifayela le-JavaScript (bundle.js, cishe 3–3.7 MB) ekhipha kusukela ku- faka okuthunyelwe xhuma iphakethe.jsonNgenxa yalokho, Ukufakwa ngakunye kuqalisa umthwalo wokukhokha ngokuzenzakalelayo. Lo mklamo ufihla izihlonzi, ucindezela ukugeleza kokulawula, futhi usunduza yonke i-logic ibe yinto eyodwa esebenza ngesikhathi sokufakwa. Abahlaziyi baqinisekisa njalo ukuhlanganiswa kwe-Webpack, usayizi wefayela ongavamile, kanye nokusebenza kwesikhathi sokufakwa.
Izici zokungacaci kanye nokungahlaziyi ozozibona kumasampula:
- Igrafu yemojula encane ngama-ID emojuli yezinombolo, amazwana angemaningi, kanye nokugeleza kokulawula okucaba., Lesi sakhiwo senza ukubuyekezwa ngesandla kube nzima kakhulu.
- Ukufihla izintambo ngokusebenzisa izendlalelo zesisekelo64 kanye nabasizi bokwakha. Isibonelo, Ukubhala ikhodi nokubhala ikhodi okuphindaphindwayo kwe-base64 kuvame ukuvela ngezinqubo zokukhipha idatha.
- Ukuthunyelwa okuguqukayo ngokusebenzisa eval-amaphethini esitayela kanye nemizimba yomsebenzi ekhiqizwe, ngaleyo ndlela ivumela ikhodi ukuthi ishintshe ukuziphatha ngesikhathi sokusebenza.
- Ukuhlunga kwe-OS ukukhetha ukusebenza kwe-Linux kanye ne-macOS ikakhulukazi kuma-CI runners nama-laptop onjiniyela.
Kusukela ekhoneni elisebenzayo, inqwaba iyi-modular. Ama-Writeups achaza amamojula okuthola i-OS, isistimu yamafayela kanye nokuskena okuyimfihlo kwe-git, ukufinyelela kwe-cloud SDK, imisebenzi ye-GitHub API, kanye nenjini yokusabalalisa ehlela amanye amaphakheji umgcini anawo. Eqinisweni, i-StepSecurity kanye ne-ReversingLabs zombili ziqokomisa umsebenzi ovuselela ngokuzenzakalelayo amaphakheji nge-nicious hook.
Ukusebenza Kwesikhathi Sokufaka ku-Shai-Hulud: Indlela Amaphakheji e-npm Aqala Ngayo I-Worm
Ukuhlasela kuqala lapho i-postinstall isebenzisa i-node bundle.js. Kuleli qophelo, iskripthi siqala futhi sivule isimo sokusebenza ngenkumbulo, sibeka isiteji sokusebenza okugcwele kwe-worm.
Ukutholwa nokuvuna
- I-payload dumps i-process.env futhi iskena amafayela endawo ukuthola izimfihlo ze-entropy ephezulu kanye neziqalo zethokheni. Ngaphezu kwalokho, yandisa ukumbozwa ngokusebenzisa i-TruffleHog.
- Ibuza ngemininingwane ye-cloud metadata ukuze iqoqe iziqinisekiso zesikhashana. Ngokwesibonelo, izingcingo ku-
169.254.169.254ku-AWS nomametadata.google.internalku-GCP kuvame ukuvela kubantu abangenwe yileli gciwane. - Ngenxa yalokho, Noma yikuphi ukuqinisekiswa okutholakalayo kungasetshenziswa ngokushesha ukushicilela amaphakheji amasha e-npm noma ukusunduza ukuhamba komsebenzi kwe-GitHub.
Exfiltration
- Isibungu sidala i-repo entsha ye-GitHub ebizwa ngokuthi Shai Hulud futhi ubhala ikhodi ephindwe kabili ye-base64
data.jsonngemininingwane yesikhulumi, izindawo zokulahla imfucuza, kanye nezimfihlo. Njengoba kungabonakala, lokhu kuziphatha okunomsindo kulula ukukubona uma abavikeli bazi ukuthi babheke kuphi. - Iphinde itshale ukuhamba komsebenzi kwe-GitHub Actions, ngokuvamile egatsheni elibizwa ngokuthi shai-hulud, lokho kulandelana
${{ toJSON(secrets) }}futhi ithumela idatha ku-webhook engaguquki. Ngaphezu kwalokho, lo msebenzi uyaqhubeka kuze kube yilapho othile eyisusa ngenkuthalo.
Ukusikisela
- Nganoma iyiphi ithokheni ye-npm etholakele, umthwalo wokukhokha ubala wonke amaphakheji aphethwe ngumnakekeli othintekile. Bese, ilanda i-tarball ngayinye, ifake i-bundle.js kanye nokufakwa kwe-postinstall, bese ishicilela kabusha iphakheji.
- Ngenxa yalokho, amaphakheji amaningi athelelekile angavela ngehora nje, okwandisa ububanzi bokuqhuma kulo lonke uhlelo lwemvelo.
Ukuphikelela kanye nokuvezwa
I-worm igcina imisebenzi enobungozi iphila futhi, ezimweni eziningana, iguqula izindawo zokugcina zangasese zibe zomphakathi nge- "-ukufuduka" isijobelelo. Sekukonke, lokhu kuqinisekisa ukuthi umhlaseli ugcina indawo futhi kwandisa ukuvuza kwedatha.
Inothi lokuthola ukhiye
Lokhu kusetshenziswa okungavamile kwe ${{ toJSON(secrets) }} ku-Actions imisebenzi ayivamile. Ngakho-ke, amaqembu kufanele akuphathe njengesibonakaliso sesibonakaliso esiphezulu ngesikhathi sokuzingela.
Iphethini yokusebenza ehlanzekile okufanele uyifune
Lokhu kusetshenziswa okungavamile kwe kuya I-JSON (izimfihlo) I-Actions iyisibonakaliso esiphezulu kulesi sigameko.
Ikhodi-mbumbulu yokusabalala kwezinga eliphezulu (ephephile, echazayo)
Abahlaziyi balubonile lolu chungechunge ngezinga, oluchaza ukwenyuka okusheshayo kusuka kuma-amashumi amaningi kuya emakhulwini amaphakheji athelelekile.
Kungani lokhu kuyimbungu ohlelweni lwe-ecosystem oluhlanganisiwe
I-worm iyi-malware esakazeka yodwa ngaphandle kokudinga izinyathelo zomsebenzisi ngesandla kuzo zonke izigaba. Ezinhlelweni zokusebenza, ama-worm avame ukusebenzisa ubuthakathaka benethiwekhi ukuze asuke komunye umshini aye komunye. Ngokuphambene nalokho, i-Shai-Hulud isebenza ngaphakathi kwerejista ye-npm. Indlela yayo ephumelelayo idlula ukusetshenziswa kabusha kobufakazi.
I-worm isebenzisa amathokheni e-npm publish abiwe. Lapho nje ithola iziqinisekiso ezivumelekile, iphinda ishicilele izinguqulo ezinegciwane ngaphansi kwamanye amaphakheji aphethwe ngumnakekeli ofanayo. Ngemva kwalokho, lawo maphakheji afakwa ngabathuthukisi abangaqaphile noma abagijimi be-CI, bese umjikelezo uphinda.
Ngenxa yalesi sizathu, abahlaziyi bezokuphepha, okuhlanganisa Ukufunda Okumnyama, hlela uShai-Hulud njenge isibungu esiziphindaphindayo kunokuba kube yi-trojan elula noma isigameko sokubhala phansi. Umehluko ubalulekile: i-trojan ivame ukulimaza umuntu oyedwa, kodwa isibungu sandisa umthelela waso ngokuzenzakalelayo kuyo yonke indawo.
Ishidi lokukhohlisa elithi "Isebenza kanjani"
Ukufingqa umjikelezo wokuphila kukaShai-Hulud, nansi inkingacisukuhlukaniswa kwezinyathelo zayo eziyinhloko:
- Iphakheji ene faka okuthunyelwe ifakiwe, futhi
bundle.jsuyayikhipha. - I-payload dumps ishintshashintsha indawo, iskena amafayela kanye nomlando we-git, isebenza I-TruffleHog, futhi ibuza ngezinsizakalo ze-cloud metadata. Ngenxa yalokho, noma iyiphi imfihlo etholakele iba usizo ngokushesha.
- Ukuphuma kwenzeka ngezindlela ezimbili: okokuqala, ngokudala i-repo yomphakathi ebizwa ngokuthi Shai Hulud ene-double base64-encoded
data.jsonokwesibili, ngokutshala umsebenzi we-GitHub Actions othumela${{ toJSON(secrets) }}ku-webhook. - Isebenzisa noma yiliphi ithokheni le-npm elibiwe, i-worm iphinda ishicilele wonke amanye amaphakheji aphethwe ngumnakekeli othintekile nge-hook efanayo enonya. Ngale ndlela, ukutheleleka kwanda ngokushesha.
- Ekugcineni, umhlaseli uphethe izimfihlo ezengeziwe, amaphakheji amaningi okufanele awasakaze, futhi ukuphikelela ngaphakathi kwama-akhawunti e-GitHub kanye nama-repository.
Ungakugwema kanjani lokhu kuhlaselwa, cishe
I-Shai-Hulud iyisixwayiso. Isibungu esisebenzisa amathokheni bese sizishicilela kabusha asiyona ingozi yesikhathi esizayo, sibukhoma ku- amaphakheji e-npm namuhla. Ukuvimbela lolu hlobo lwe- ukuhlaselwa kwe-supply chain, amaqembu adinga izilawuli ezingahlelwa, ezizenzakalelayo, futhi ezisebenza ngqo ku CI/CD pipelines. Lezi izindlela zokuzivikela ezifanayo ongazisebenzisa kakade I-Xygeni.
Misa izinto ezimbi esangweni
Kufanele uskene amaphakheji e-npm nama-tarball ngaphambi kokuthi afinyelele onjiniyela noma imisebenzi ye-CI. bundle.js amafayela, ukufakwa ngemuva okusolisayo hooks, kanye nezimpawu zokufiphaza konke kusebenza njengezimpawu zokuqala ezibomvu. Ngaphezu kwalokho, ukuphoqelela izikhathi zokupholisa kanye nezinguqulo eziphiniwe ku pipelines ivimbela ukukhishwa okusha, okungakahlolwa ukuthi kudliwe ngokuzenzakalelayo.
Harden CI/CD ngephutha
Guardrails in CI/CD zibalulekile. Bayakwenqaba ukuhlanganiswa noma ukufakwa okwethula izikripthi ezintsha noma ama-binary. Ngesikhathi esifanayo, bavimba imisebenzi ehlanganisa izimfihlo ngokulandelana noma ukuzama okuthunyelwe kwangaphandle. Amaqembu kufanele futhi adinge ukufakwa kwe-lockfile kuphela (npm ci) kuzo zonke pipelinengakho-ke amasethi okuthembela ahlala ephindaphindwa futhi ephephile.
Nciphisa irediyasi yokuqhuma kwethokheni
Izimfihlo akumele zibe yiphuzu elilodwa lokwehluleka. Skena ikhodi, izilungiselelo, kanye pipeline okukhiphayo kwe iziqinisekiso eziveziweAmathokheni kufanele ahlolwe kancane, anikezwe isikhathi sokuphila esifushane, futhi ajikeleziswe ngokuzenzakalelayo lapho kutholwa ukuchayeka. Njengomthetho, phatha noma yiliphi ithokheni elisetshenziswe kumphathi owenze ukufakwa okusolisayo njengokwehlisiwe.
Bona ukuziphatha kwezibungu kusenesikhathi
Ukutholwa kwe-Anomaly kubalulekile. Isibonelo, ukwanda okungazelelwe kwemicimbi yokushicilela ye-npm, imisebenzi emisha evela ngaphandle kwesizathu, noma ama-repos omphakathi amasha agcwele amafayela afihliwe angajwayelekile konke kungabonisa umsebenzi we-worm. Ngakho-ke, amaqembu kufanele aphakamise izexwayiso ngokushesha futhi ahlukanise noma yibaphi abanakekeli noma abagijimi ababonisa lezi zimpawu zokuxwayisa.
Lungisa ngokushesha ngaphandle kokuphazamisa izakhiwo
Isivinini nokuphepha kumele kuhambisane. Okuzenzakalelayo pull requests ingashintsha amaphakheji e-npm asengozini ngezinguqulo ezihlolwe. Ngaphezu kwalokho, ukufinyeleleka futhi ukuxhashazwa Ukuhlaziywa kuqinisekisa ukuthi ukuthuthukiswa kuhlala kuncane futhi kuzinzile. Okokugcina, vuselela kabusha abagijimi be-CI abathintekile kusukela ezithombeni ezihlanzekile uma ukuvezwa sekuqinisekisiwe, okuvimbela ukuhlaselwa ukuthi kungasabalali kakhulu.
Izinkomba Zokuvumelana (ama-IoC)
Uma kuhlaziywa uShai-Hulud, amaqembu kufanele aqaphele kokubili ama-IoC angaguquki kumafayela kanye ama-IoC okuziphatha in pipelines. Ngokubambisana, lezi zimpawu zisiza ekutholeni izifo kusenesikhathi futhi ziphendule ngaphambi kokuba isibungu sisabalale kakhulu.
Ama-IoC aqinile
Ukufana okulandelayo kwe-SHA-256 kubonwe bundle.js amasampula:
- 46faab8ab153fae6e80e7cca38eab363075bb524edd79e42269217a083628f09
- 81d2a004a1bca6ef87a1caf7d0e0b355ad1764238e40ff6d1b1cb77ad4f595c3
- dc67467a39b70d1cd4c1f7f7a459b35058163592f4a9e8fb4dffcbba98ef210c
Ngaphezu kwalokho, qaphela lezi zindlela eziphindaphindayo:
- A
bundle.jsempandeni yephakheji. "postinstall": "node bundle.js"Ngaphakathipackage.json.- Izindawo zokugcina eziqanjwe ngamagama Shai Hulud.
- Imisebenzi ye-GitHub equkethe
${{ toJSON(secrets) }}.
Ama-IoC okuziphatha
Ngale kokusayina amafayela, umsebenzi we-worm uziveza ngokuziphatha. Isibonelo:
- Ukuqhuma okungazelelwe kwe-npm kushicilela imicimbi evela komunye umgcini.
- Izindlela ezintsha zokusebenza ezisunduza idatha ezindaweni zokugcina zangaphandle.
- Izicelo ze-POST eziphumayo ziqalwe ngabagijimi be-CI.
- Ama-repo omphakathi adalwe muva nje anama-blob abhalwe ngekhodi.
Ukuzingela okusheshayo
Isiphetho: Izifundo ezivela kuShai-Hulud
The Ukuhlaselwa kwe-Shai-Hulud supply chain kumaphakheji e-npm kubonisa ukuthi uchungechunge lokuhlinzekwa kwesofthiwe lwanamuhla selube buthakathaka kangakanani. Lesi sibungu senza okungaphezu kokwengeza ikhodi enonya. Seba amathokheni, sathumela idatha, sabe sesiphinde sazishicilela ngokuzenzakalelayo. Ngenxa yalokhu, ukuhlasela kwasakazeka ngamahora esikhundleni samasonto.
Kwabathuthukisi kanye namaqembu e-DevOps, izifundo zicacile:
- Konke ukufakwa kusebenzisa ikhodi. Ngisho nephakheji evamile ye-npm ingafihla isibungu se-postinstall.
- Ithokheni ngayinye inenani eliphezulu. Uma seyebiwe, ingasetshenziswa ukusabalalisa i-malware kabanzi.
- Njalo pipeline idinga ukuhlolwa. ngaphandle guardrails Ngokuncika, imisebenzi, kanye nezimfihlo, ukuvumelana okukodwa kungathinta ngokushesha umkhiqizo.
Ngakho-ke, ukuvimba ukuhlaselwa okufana ne-Shai-Hulud kudinga izilawuli ezizenzakalelayo futhi ezilula ukuzisebenzisa. Amaqembu kufanele askene amaphakheji e-npm ngaphambi kokufaka, asebenzise ukwakheka kwe-lockfile, abone umsebenzi wokushicilela ongajwayelekile, futhi agcine amathokheni ehlala isikhathi esifushane. Lezi zinyathelo azisekho ongakhetha kuzo. Kunalokho, ziyisisekelo sokuqina kwesimanje. pipelines.
Kwa-Xygeni, sibona ukuhlaselwa kwe-Shai-Hulud supply chain njengesixwayiso sayo yonke i-ecosystem yomthombo ovulekile. Indlela eqhubekayo yokuqhubekela phambili ukuletha ukuphepha kwe-supply chain ngqo enkambisweni yokuthuthukiswa, endaweni lapho ikhodi, amaphakheji e-npm, kanye pipelinexhuma.
Ngezansi uhlu oluphelele lwamaphakheji e-npm kanye nezinguqulo ezibikwe njengezisengozini ku-Shai-Hulud. Sebenzisa ukuze uhlole amafayela akho okukhiya, amarejista, kanye ne-CI pipelines ukuze kuvezwe.
Uhlu lwamaphakheji asengozini
📦 Ukubuka kuqala kwamaphakheji e-npm aphazamisekile
| Igama lephakheji | Inguqulo | Shicilela Usuku |
|---|---|---|
| i-json-rules-injini-eyenziwe lula | 0.2.1 | 2025-09-14T17:58:51.203Z |
| umshayeli wendiza | 0.8.8 | 2025-09-14T18:35:07.600Z |
| igrafu yolwazi lwe-mcp | 1.2.1 | 2025-09-14T18:35:09.494Z |
| isikhulu sezindiza | 0.3.1 | 2025-09-14T18:35:09.521Z |
| isango lokugxuma | 0.0.2 | 2025-09-14T18:35:09.651Z |
| i-tvi-cli | 0.1.5 | 2025-09-14T18:35:10.996Z |
| @thangved/iwindi lokubuyela emuva | 1.1.4 | 2025-09-14T20:31:38.479Z |
| @tnf-dev/api | 1.0.8 | 2025-09-14T20:31:39.547Z |
| @tnf-dev/js | 1.0.8 | 2025-09-14T20:31:41.251Z |
| @tnf-dev/mui | 1.0.8 | 2025-09-14T20:31:41.259Z |
| @tnf-dev/core | 1.0.8 | 2025-09-14T20:31:42.728Z |
| @teselagen/ithebula lokusabela | 6.10.20 | 2025-09-14T20:37:08.597Z |
| @hestjs/demo | 0.1.2 | 2025-09-14T20:45:52.348Z |
| @nexe/eslint-config | 0.1.1 | 2025-09-14T20:45:53.625Z |
| @hestjs/eslint-config | 0.1.2 | 2025-09-14T20:45:55.044Z |
| @nexe/config-manager | 0.1.1 | 2025-09-14T20:45:55.066Z |
| @nexe/logger | 0.1.3 | 2025-09-14T20:45:55.170Z |
| @hestjs/logger | 0.1.6 | 2025-09-14T20:45:55.197Z |
| @hestjs/ukuqinisekiswa | 0.1.6 | 2025-09-14T20:45:55.595Z |
| @hestjs/core | 0.2.1 | 2025-09-14T20:45:55.888Z |
➡️ Buka Uhlu Olugcwele Lwamaphakheji Asengozini
| Igama lephakheji | Inguqulo | Shicilela Usuku |
|---|---|---|
| i-json-rules-injini-eyenziwe lula | 0.2.1 | 2025-09-14T17:58:51.203Z |
| umshayeli wendiza | 0.8.8 | 2025-09-14T18:35:07.600Z |
| igrafu yolwazi lwe-mcp | 1.2.1 | 2025-09-14T18:35:09.494Z |
| isikhulu sezindiza | 0.3.1 | 2025-09-14T18:35:09.521Z |
| isango lokugxuma | 0.0.2 | 2025-09-14T18:35:09.651Z |
| i-tvi-cli | 0.1.5 | 2025-09-14T18:35:10.996Z |
| @thangved/iwindi lokubuyela emuva | 1.1.4 | 2025-09-14T20:31:38.479Z |
| @tnf-dev/api | 1.0.8 | 2025-09-14T20:31:39.547Z |
| @tnf-dev/js | 1.0.8 | 2025-09-14T20:31:41.251Z |
| @tnf-dev/mui | 1.0.8 | 2025-09-14T20:31:41.259Z |
| @tnf-dev/core | 1.0.8 | 2025-09-14T20:31:42.728Z |
| @teselagen/ithebula lokusabela | 6.10.20 | 2025-09-14T20:37:08.597Z |
| @hestjs/demo | 0.1.2 | 2025-09-14T20:45:52.348Z |
| @nexe/eslint-config | 0.1.1 | 2025-09-14T20:45:53.625Z |
| @hestjs/eslint-config | 0.1.2 | 2025-09-14T20:45:55.044Z |
| @nexe/config-manager | 0.1.1 | 2025-09-14T20:45:55.066Z |
| @nexe/logger | 0.1.3 | 2025-09-14T20:45:55.170Z |
| @hestjs/logger | 0.1.6 | 2025-09-14T20:45:55.197Z |
| @hestjs/ukuqinisekiswa | 0.1.6 | 2025-09-14T20:45:55.595Z |
| @hestjs/core | 0.2.1 | 2025-09-14T20:45:55.888Z |
| @hestjs/cqrs | 0.1.6 | 2025-09-14T20:45:55.966Z |
| @hestjs/scalar | 0.1.7 | 2025-09-14T20:45:56.386Z |
| ukulayisha ifayela le-ng2 | 7.0.3 | 2025-09-15T02:44:29.555Z |
| umphathi wesaziso se-capacitor | 0.0.2 | 2025-09-15T04:54:48.431Z |
| i-capacitor-plugin-vonage | 1.0.2 | 2025-09-15T04:54:48.501Z |
| uhlelo lokusebenza lwe-capacitor-plugin-health | 0.0.2 | 2025-09-15T04:54:48.704Z |
| izimvume ze-capacitorandroid | 0.0.4 | 2025-09-15T04:54:48.753Z |
| ikhithi yokushaya ucingo ye-voip | 1.0.2 | 2025-09-15T04:54:49.223Z |
| i-capacitor-plugin-ihealth | 1.1.8 | 2025-09-15T04:55:08.113Z |
| @art-ws/common | 2.0.22 | 2025-09-15T05:21:15.411Z |
| @art-ws/config-eslint | 2.0.4 | 2025-09-15T05:21:17.199Z |
| i-ngx-ws | 1.1.5 | 2025-09-15T05:21:17.514Z |
| @art-ws/slf | 2.0.15 | 2025-09-15T05:21:17.524Z |
| @art-ws/http-server | 2.0.21 | 2025-09-15T05:21:17.745Z |
| pm2-gelf-json | 1.0.4 | 2025-09-15T05:21:18.413Z |
| @art-ws/di | 2.0.28 | 2025-09-15T05:21:18.488Z |
| @art-ws/di-node | 2.0.13 | 2025-09-15T05:21:18.849Z |
| @art-ws/config-ts | 2.0.7 | 2025-09-15T05:21:19.408Z |
| @art-ws/db-context | 2.0.21 | 2025-09-15T05:21:19.814Z |
| @art-ws/openapi | 0.1.9 | 2025-09-15T05:21:19.969Z |
| @art-ws/web-app | 1.0.3 | 2025-09-15T05:21:20.383Z |
| @art-ws/ssl-info | 1.0.9 | 2025-09-15T05:21:20.927Z |
