A set of scripts to check quickly impact of the 2025/09/08 supply chain attack on your project

compromised-2025-09-09.rb

#!/usr/bin/env ruby

require 'json'
require 'set'

#####################################################################
### Make sure you have a compromised_packages.json file with the list
#####################################################################

class NPMSecurityChecker
  def initialize(compromised_json_file = 'compromised_packages.json')
    @compromised_json_file = compromised_json_file
    @compromised_packages = load_compromised_packages
    @findings = []
  end

  def load_compromised_packages
    unless File.exist?(@compromised_json_file)
      puts "Error: #{@compromised_json_file} not found!"
      puts "Please ensure the JSON file with compromised packages exists."
      exit 1
    end

    begin
      data = JSON.parse(File.read(@compromised_json_file))
      packages = Set.new
      
      data['compromised_packages'].each do |package_version|
        packages.add(package_version)
      end
      
      packages
    rescue JSON::ParserError => e
      puts "Error parsing JSON file: #{e.message}"
      exit 1
    rescue => e
      puts "Error loading compromised packages: #{e.message}"
      exit 1
    end
  end

  def parse_package_version(package_version_string)
    # Handle scoped packages like @scope/package@version
    if package_version_string.start_with?('@')
      # Find the last @ which separates version from package name
      parts = package_version_string.split('@')
      if parts.length >= 3
        # @scope/package@version -> ["", "scope/package", "version"]
        package_name = "@#{parts[1]}"
        version = parts[2]
      else
        return nil
      end
    else
      # Regular package@version
      parts = package_version_string.split('@')
      if parts.length == 2
        package_name = parts[0]
        version = parts[1]
      else
        return nil
      end
    end
    
    [package_name, version]
  end

  def check_package_json(file_path)
    return unless File.exist?(file_path)

    begin
      data = JSON.parse(File.read(file_path))
    rescue JSON::ParserError => e
      puts "Warning: Could not parse #{file_path}: #{e.message}"
      return
    end

    dependency_types = %w[dependencies devDependencies peerDependencies optionalDependencies]
    
    dependency_types.each do |dep_type|
      next unless data[dep_type]
      
      data[dep_type].each do |package_name, version_spec|
        # Clean version spec (remove ^, ~, etc.)
        clean_version = version_spec.gsub(/^[\^~>=<]/, '').split(' ').first
        
        # Check if this exact package@version is compromised
        package_version = "#{package_name}@#{clean_version}"
        
        if @compromised_packages.include?(package_version)
          @findings << {
            file: file_path,
            package: package_name,
            version: clean_version,
            version_spec: version_spec,
            dependency_type: dep_type,
            match_type: 'exact',
            source: 'package.json'
          }
        end
        
        # Also check if any compromised package has the same name (version mismatch)
        @compromised_packages.each do |compromised|
          comp_name, comp_version = parse_package_version(compromised)
          next unless comp_name
          
          if comp_name == package_name && comp_version != clean_version
            @findings << {
              file: file_path,
              package: package_name,
              version: clean_version,
              version_spec: version_spec,
              compromised_version: comp_version,
              dependency_type: dep_type,
              match_type: 'name_only',
              source: 'package.json'
            }
          end
        end
      end
    end
  end

  def check_package_lock_json(file_path)
    return unless File.exist?(file_path)

    begin
      data = JSON.parse(File.read(file_path))
    rescue JSON::ParserError => e
      puts "Warning: Could not parse #{file_path}: #{e.message}"
      return
    end

    # Check packages section (npm v7+)
    if data['packages']
      data['packages'].each do |package_path, package_info|
        next if package_path.empty? # Skip root
        
        package_name = package_info['name']
        version = package_info['version']
        
        next unless package_name && version
        
        package_version = "#{package_name}@#{version}"
        
        if @compromised_packages.include?(package_version)
          @findings << {
            file: file_path,
            package: package_name,
            version: version,
            match_type: 'exact',
            source: 'package-lock.json',
            package_path: package_path
          }
        end
      end
    end

    # Check dependencies section (npm v6 and earlier)
    if data['dependencies']
      check_lock_dependencies(data['dependencies'], file_path)
    end
  end

  def check_lock_dependencies(deps, file_path, prefix = '')
    deps.each do |package_name, package_info|
      version = package_info['version']
      next unless version
      
      package_version = "#{package_name}@#{version}"
      
      if @compromised_packages.include?(package_version)
        @findings << {
          file: file_path,
          package: package_name,
          version: version,
          match_type: 'exact',
          source: 'package-lock.json'
        }
      end
      
      # Recursively check nested dependencies
      if package_info['dependencies']
        check_lock_dependencies(package_info['dependencies'], file_path, "#{prefix}#{package_name}/")
      end
    end
  end

  def check_yarn_lock(file_path)
    return unless File.exist?(file_path)

    begin
      content = File.read(file_path)
      
      # Parse yarn.lock entries
      content.scan(/^"?([^"\s]+)@[^"]*"?:\s*\n(?:\s+.*\n)*?\s+version\s+"([^"]+)"/) do |package_name, version|
        # Handle scoped packages in yarn.lock format
        if package_name.include?('@') && !package_name.start_with?('@')
          # Convert "package@^1.0.0" style to just "package"
          package_name = package_name.split('@').first
        end
        
        package_version = "#{package_name}@#{version}"
        
        if @compromised_packages.include?(package_version)
          @findings << {
            file: file_path,
            package: package_name,
            version: version,
            match_type: 'exact',
            source: 'yarn.lock'
          }
        end
      end
    rescue => e
      puts "Warning: Could not parse #{file_path}: #{e.message}"
    end
  end

  def scan_directory(dir_path)
    Dir.glob(File.join(dir_path, '**/package.json')) do |file|
      check_package_json(file)
    end
    
    Dir.glob(File.join(dir_path, '**/package-lock.json')) do |file|
      check_package_lock_json(file)
    end
    
    Dir.glob(File.join(dir_path, '**/yarn.lock')) do |file|
      check_yarn_lock(file)
    end
  end

  def scan_file(file_path)
    case File.basename(file_path)
    when 'package.json'
      check_package_json(file_path)
    when 'package-lock.json'
      check_package_lock_json(file_path)
    when 'yarn.lock'
      check_yarn_lock(file_path)
    else
      puts "Unsupported file type: #{file_path}"
    end
  end

  def report_findings
    puts "=" * 70
    puts "NPM Supply Chain Security Check Results"
    puts "=" * 70
    puts "Checked against #{@compromised_packages.size} known compromised packages"
    puts

    if @findings.empty?
      puts "✓ No compromised packages detected!"
      puts "Your dependencies appear safe from this known supply chain attack."
      return true
    end

    puts "⚠ SECURITY ALERT: Compromised packages detected!"
    puts

    # Group findings by file
    @findings.group_by { |f| f[:file] }.each do |file, findings|
      puts "File: #{file}"
      
      findings.each do |finding|
        case finding[:match_type]
        when 'exact'
          puts "  🚨 EXACT MATCH: #{finding[:package]}@#{finding[:version]}"
        when 'name_only'
          puts "  ⚠ PACKAGE NAME MATCH: #{finding[:package]}"
          puts "    Your version: #{finding[:version]} | Compromised version: #{finding[:compromised_version]}"
        end
        
        puts "    Source: #{finding[:source]}"
        puts "    Type: #{finding[:dependency_type]}" if finding[:dependency_type]
        puts
      end
    end

    puts "IMMEDIATE ACTIONS REQUIRED:"
    puts "1. Do NOT install or update these packages"
    puts "2. Remove these packages from your project immediately"
    puts "3. Clear package manager cache (npm cache clean --force)"
    puts "4. Review your systems for signs of compromise"
    puts "5. Consider rotating API keys and secrets"
    puts "6. Update your security team if applicable"

    false
  end

  def run(paths)
    paths = ['.'] if paths.empty?
    
    paths.each do |path|
      if File.directory?(path)
        puts "Scanning directory: #{File.expand_path(path)}"
        scan_directory(path)
      elsif File.file?(path)
        puts "Scanning file: #{File.expand_path(path)}"
        scan_file(path)
      else
        puts "Path not found: #{path}"
      end
    end
    
    safe = report_findings
    exit(safe ? 0 : 1)
  end
end

# Run the checker
if __FILE__ == $0
  checker = NPMSecurityChecker.new
  checker.run(ARGV)
end

compromised_packages.json

{
  "compromised_packages": [
    "@ahmedhfarag/ngx-perfect-scrollbar@20.0.20",
    "@ahmedhfarag/ngx-virtual-scroller@4.0.4",
    "another-shai@1.0.1",
    "@art-ws/common@2.0.28",
    "@art-ws/config-eslint@2.0.4",
    "@art-ws/config-eslint@2.0.5",
    "@art-ws/config-ts@2.0.7",
    "@art-ws/config-ts@2.0.8",
    "@art-ws/db-context@2.0.24",
    "@art-ws/di-node@2.0.13",
    "@art-ws/di@2.0.28",
    "@art-ws/di@2.0.32",
    "@art-ws/eslint@1.0.5",
    "@art-ws/eslint@1.0.6",
    "@art-ws/fastify-http-server@2.0.24",
    "@art-ws/fastify-http-server@2.0.27",
    "@art-ws/http-server@2.0.21",
    "@art-ws/http-server@2.0.25",
    "@art-ws/openapi@0.1.12",
    "@art-ws/openapi@0.1.9",
    "@art-ws/package-base@1.0.5",
    "@art-ws/package-base@1.0.6",
    "@art-ws/prettier@1.0.5",
    "@art-ws/prettier@1.0.6",
    "@art-ws/slf@2.0.15",
    "@art-ws/slf@2.0.22",
    "@art-ws/ssl-info@1.0.10",
    "@art-ws/ssl-info@1.0.9",
    "@art-ws/web-app@1.0.3",
    "@art-ws/web-app@1.0.4",
    "@crowdstrike/commitlint@8.1.1",
    "@crowdstrike/commitlint@8.1.2",
    "@crowdstrike/falcon-shoelace@0.4.1",
    "@crowdstrike/falcon-shoelace@0.4.2",
    "@crowdstrike/foundry-js@0.19.1",
    "@crowdstrike/foundry-js@0.19.2",
    "@crowdstrike/glide-core@0.34.2",
    "@crowdstrike/glide-core@0.34.3",
    "@crowdstrike/logscale-dashboard@1.205.1",
    "@crowdstrike/logscale-dashboard@1.205.2",
    "@crowdstrike/logscale-file-editor@1.205.1",
    "@crowdstrike/logscale-file-editor@1.205.2",
    "@crowdstrike/logscale-parser-edit@1.205.1",
    "@crowdstrike/logscale-parser-edit@1.205.2",
    "@crowdstrike/logscale-search@1.205.1",
    "@crowdstrike/logscale-search@1.205.2",
    "@crowdstrike/tailwind-toucan-base@5.0.1",
    "@crowdstrike/tailwind-toucan-base@5.0.2",
    "@ctrl/deluge@7.2.1",
    "@ctrl/deluge@7.2.2",
    "@ctrl/golang-template@1.4.2",
    "@ctrl/golang-template@1.4.3",
    "@ctrl/magnet-link@4.0.3",
    "@ctrl/magnet-link@4.0.4",
    "@ctrl/ngx-codemirror@7.0.1",
    "@ctrl/ngx-codemirror@7.0.2",
    "@ctrl/ngx-csv@6.0.1",
    "@ctrl/ngx-csv@6.0.2",
    "@ctrl/ngx-emoji-mart@9.2.1",
    "@ctrl/ngx-emoji-mart@9.2.2",
    "@ctrl/ngx-rightclick@4.0.1",
    "@ctrl/ngx-rightclick@4.0.2",
    "@ctrl/qbittorrent@9.7.1",
    "@ctrl/qbittorrent@9.7.2",
    "@ctrl/react-adsense@2.0.1",
    "@ctrl/react-adsense@2.0.2",
    "@ctrl/shared-torrent@6.3.1",
    "@ctrl/shared-torrent@6.3.2",
    "@ctrl/tinycolor@4.1.1",
    "@ctrl/tinycolor@4.1.2",
    "@ctrl/torrent-file@4.1.1",
    "@ctrl/torrent-file@4.1.2",
    "@ctrl/transmission@7.3.1",
    "@ctrl/ts-base32@4.0.1",
    "@ctrl/ts-base32@4.0.2",
    "@hestjs/core@0.2.1",
    "@hestjs/cqrs@0.1.6",
    "@hestjs/demo@0.1.2",
    "@hestjs/eslint-config@0.1.2",
    "@hestjs/logger@0.1.6",
    "@hestjs/scalar@0.1.7",
    "@hestjs/validation@0.1.6",
    "@nativescript-community/arraybuffers@1.1.6",
    "@nativescript-community/arraybuffers@1.1.7",
    "@nativescript-community/arraybuffers@1.1.8",
    "@nativescript-community/gesturehandler@2.0.35",
    "@nativescript-community/perms@3.0.5",
    "@nativescript-community/perms@3.0.6",
    "@nativescript-community/perms@3.0.7",
    "@nativescript-community/perms@3.0.8",
    "@nativescript-community/sentry@4.6.43",
    "@nativescript-community/sqlite@3.5.2",
    "@nativescript-community/sqlite@3.5.3",
    "@nativescript-community/sqlite@3.5.4",
    "@nativescript-community/sqlite@3.5.5",
    "@nativescript-community/text@1.6.10",
    "@nativescript-community/text@1.6.11",
    "@nativescript-community/text@1.6.12",
    "@nativescript-community/text@1.6.13",
    "@nativescript-community/text@1.6.9",
    "@nativescript-community/typeorm@0.2.30",
    "@nativescript-community/typeorm@0.2.31",
    "@nativescript-community/typeorm@0.2.32",
    "@nativescript-community/typeorm@0.2.33",
    "@nativescript-community/ui-collectionview@6.0.6",
    "@nativescript-community/ui-document-picker@1.1.27",
    "@nativescript-community/ui-document-picker@1.1.28",
    "@nativescript-community/ui-drawer@0.1.30",
    "@nativescript-community/ui-image@4.5.6",
    "@nativescript-community/ui-label@1.3.35",
    "@nativescript-community/ui-label@1.3.36",
    "@nativescript-community/ui-label@1.3.37",
    "@nativescript-community/ui-material-bottom-navigation@7.2.72",
    "@nativescript-community/ui-material-bottom-navigation@7.2.73",
    "@nativescript-community/ui-material-bottom-navigation@7.2.74",
    "@nativescript-community/ui-material-bottom-navigation@7.2.75",
    "@nativescript-community/ui-material-bottomsheet@7.2.72",
    "@nativescript-community/ui-material-core-tabs@7.2.72",
    "@nativescript-community/ui-material-core-tabs@7.2.73",
    "@nativescript-community/ui-material-core-tabs@7.2.74",
    "@nativescript-community/ui-material-core-tabs@7.2.75",
    "@nativescript-community/ui-material-core-tabs@7.2.76",
    "@nativescript-community/ui-material-core@7.2.72",
    "@nativescript-community/ui-material-core@7.2.73",
    "@nativescript-community/ui-material-core@7.2.74",
    "@nativescript-community/ui-material-core@7.2.75",
    "@nativescript-community/ui-material-core@7.2.76",
    "@nativescript-community/ui-material-ripple@7.2.72",
    "@nativescript-community/ui-material-ripple@7.2.73",
    "@nativescript-community/ui-material-ripple@7.2.74",
    "@nativescript-community/ui-material-ripple@7.2.75",
    "@nativescript-community/ui-material-tabs@7.2.72",
    "@nativescript-community/ui-material-tabs@7.2.73",
    "@nativescript-community/ui-material-tabs@7.2.74",
    "@nativescript-community/ui-material-tabs@7.2.75",
    "@nativescript-community/ui-pager@14.1.36",
    "@nativescript-community/ui-pager@14.1.37",
    "@nativescript-community/ui-pager@14.1.38",
    "@nativescript-community/ui-pulltorefresh@2.5.4",
    "@nativescript-community/ui-pulltorefresh@2.5.5",
    "@nativescript-community/ui-pulltorefresh@2.5.6",
    "@nativescript-community/ui-pulltorefresh@2.5.7",
    "@nexe/config-manager@0.1.1",
    "@nexe/eslint-config@0.1.1",
    "@nexe/logger@0.1.3",
    "@nstudio/angular@20.0.4",
    "@nstudio/angular@20.0.5",
    "@nstudio/angular@20.0.6",
    "@nstudio/focus@20.0.4",
    "@nstudio/focus@20.0.5",
    "@nstudio/focus@20.0.6",
    "@nstudio/nativescript-checkbox@2.0.6",
    "@nstudio/nativescript-checkbox@2.0.7",
    "@nstudio/nativescript-checkbox@2.0.8",
    "@nstudio/nativescript-checkbox@2.0.9",
    "@nstudio/nativescript-loading-indicator@5.0.1",
    "@nstudio/nativescript-loading-indicator@5.0.2",
    "@nstudio/nativescript-loading-indicator@5.0.3",
    "@nstudio/nativescript-loading-indicator@5.0.4",
    "@nstudio/ui-collectionview@5.1.11",
    "@nstudio/ui-collectionview@5.1.12",
    "@nstudio/ui-collectionview@5.1.13",
    "@nstudio/ui-collectionview@5.1.14",
    "@nstudio/web-angular@20.0.4",
    "@nstudio/web@20.0.4",
    "@nstudio/xplat-utils@20.0.5",
    "@nstudio/xplat-utils@20.0.6",
    "@nstudio/xplat-utils@20.0.7",
    "@nstudio/xplat@20.0.5",
    "@nstudio/xplat@20.0.6",
    "@nstudio/xplat@20.0.7",
    "@operato/board@9.0.35",
    "@operato/board@9.0.36",
    "@operato/board@9.0.37",
    "@operato/board@9.0.38",
    "@operato/board@9.0.39",
    "@operato/board@9.0.40",
    "@operato/board@9.0.41",
    "@operato/board@9.0.42",
    "@operato/board@9.0.43",
    "@operato/board@9.0.44",
    "@operato/board@9.0.45",
    "@operato/board@9.0.46",
    "@operato/board@9.0.47",
    "@operato/board@9.0.48",
    "@operato/board@9.0.49",
    "@operato/board@9.0.50",
    "@operato/board@9.0.51",
    "@operato/data-grist@9.0.29",
    "@operato/data-grist@9.0.35",
    "@operato/data-grist@9.0.36",
    "@operato/data-grist@9.0.37",
    "@operato/graphql@9.0.22",
    "@operato/graphql@9.0.35",
    "@operato/graphql@9.0.36",
    "@operato/graphql@9.0.37",
    "@operato/graphql@9.0.38",
    "@operato/graphql@9.0.39",
    "@operato/graphql@9.0.40",
    "@operato/graphql@9.0.41",
    "@operato/graphql@9.0.42",
    "@operato/graphql@9.0.43",
    "@operato/graphql@9.0.44",
    "@operato/graphql@9.0.45",
    "@operato/graphql@9.0.46",
    "@operato/headroom@9.0.2",
    "@operato/headroom@9.0.35",
    "@operato/headroom@9.0.36",
    "@operato/headroom@9.0.37",
    "@operato/help@9.0.35",
    "@operato/help@9.0.36",
    "@operato/help@9.0.37",
    "@operato/help@9.0.38",
    "@operato/help@9.0.39",
    "@operato/help@9.0.40",
    "@operato/help@9.0.41",
    "@operato/help@9.0.42",
    "@operato/help@9.0.43",
    "@operato/help@9.0.44",
    "@operato/help@9.0.45",
    "@operato/help@9.0.46",
    "@operato/i18n@9.0.35",
    "@operato/i18n@9.0.36",
    "@operato/i18n@9.0.37",
    "@operato/input@9.0.27",
    "@operato/input@9.0.35",
    "@operato/input@9.0.36",
    "@operato/input@9.0.37",
    "@operato/input@9.0.38",
    "@operato/input@9.0.39",
    "@operato/input@9.0.40",
    "@operato/input@9.0.41",
    "@operato/input@9.0.42",
    "@operato/input@9.0.43",
    "@operato/input@9.0.44",
    "@operato/input@9.0.45",
    "@operato/input@9.0.46",
    "@operato/input@9.0.47",
    "@operato/input@9.0.48",
    "@operato/layout@9.0.35",
    "@operato/layout@9.0.36",
    "@operato/layout@9.0.37",
    "@operato/popup@9.0.22",
    "@operato/popup@9.0.35",
    "@operato/popup@9.0.36",
    "@operato/popup@9.0.37",
    "@operato/popup@9.0.38",
    "@operato/popup@9.0.39",
    "@operato/popup@9.0.40",
    "@operato/popup@9.0.41",
    "@operato/popup@9.0.42",
    "@operato/popup@9.0.43",
    "@operato/popup@9.0.44",
    "@operato/popup@9.0.45",
    "@operato/popup@9.0.46",
    "@operato/popup@9.0.49",
    "@operato/pull-to-refresh@9.0.36",
    "@operato/pull-to-refresh@9.0.37",
    "@operato/pull-to-refresh@9.0.38",
    "@operato/pull-to-refresh@9.0.39",
    "@operato/pull-to-refresh@9.0.40",
    "@operato/pull-to-refresh@9.0.41",
    "@operato/pull-to-refresh@9.0.42",
    "@operato/shell@9.0.22",
    "@operato/shell@9.0.35",
    "@operato/shell@9.0.36",
    "@operato/shell@9.0.37",
    "@operato/shell@9.0.38",
    "@operato/shell@9.0.39",
    "@operato/styles@9.0.2",
    "@operato/styles@9.0.35",
    "@operato/styles@9.0.36",
    "@operato/styles@9.0.37",
    "@operato/utils@9.0.22",
    "@operato/utils@9.0.35",
    "@operato/utils@9.0.36",
    "@operato/utils@9.0.37",
    "@operato/utils@9.0.38",
    "@operato/utils@9.0.39",
    "@operato/utils@9.0.40",
    "@operato/utils@9.0.41",
    "@operato/utils@9.0.42",
    "@operato/utils@9.0.43",
    "@operato/utils@9.0.44",
    "@operato/utils@9.0.45",
    "@operato/utils@9.0.46",
    "@operato/utils@9.0.47",
    "@operato/utils@9.0.49",
    "@operato/utils@9.0.50",
    "@operato/utils@9.0.51",
    "@teselagen/bio-parsers@0.4.30",
    "@teselagen/bounce-loader@0.3.16",
    "@teselagen/bounce-loader@0.3.17",
    "@teselagen/file-utils@0.3.22",
    "@teselagen/liquibase-tools@0.4.1",
    "@teselagen/ove@0.7.40",
    "@teselagen/range-utils@0.3.14",
    "@teselagen/range-utils@0.3.15",
    "@teselagen/react-list@0.8.19",
    "@teselagen/react-list@0.8.20",
    "@teselagen/react-table@6.10.19",
    "@teselagen/react-table@6.10.20",
    "@teselagen/react-table@6.10.22",
    "@teselagen/sequence-utils@0.3.34",
    "@teselagen/ui@0.9.10",
    "@thangved/callback-window@1.1.4",
    "@things-factory/attachment-base@9.0.42",
    "@things-factory/attachment-base@9.0.43",
    "@things-factory/attachment-base@9.0.44",
    "@things-factory/attachment-base@9.0.45",
    "@things-factory/attachment-base@9.0.46",
    "@things-factory/attachment-base@9.0.47",
    "@things-factory/attachment-base@9.0.48",
    "@things-factory/attachment-base@9.0.49",
    "@things-factory/attachment-base@9.0.50",
    "@things-factory/attachment-base@9.0.51",
    "@things-factory/attachment-base@9.0.52",
    "@things-factory/attachment-base@9.0.53",
    "@things-factory/attachment-base@9.0.54",
    "@things-factory/attachment-base@9.0.55",
    "@things-factory/auth-base@9.0.42",
    "@things-factory/auth-base@9.0.43",
    "@things-factory/auth-base@9.0.44",
    "@things-factory/auth-base@9.0.45",
    "@things-factory/email-base@9.0.42",
    "@things-factory/email-base@9.0.43",
    "@things-factory/email-base@9.0.44",
    "@things-factory/email-base@9.0.45",
    "@things-factory/email-base@9.0.46",
    "@things-factory/email-base@9.0.47",
    "@things-factory/email-base@9.0.48",
    "@things-factory/email-base@9.0.49",
    "@things-factory/email-base@9.0.50",
    "@things-factory/email-base@9.0.51",
    "@things-factory/email-base@9.0.52",
    "@things-factory/email-base@9.0.53",
    "@things-factory/email-base@9.0.54",
    "@things-factory/email-base@9.0.55",
    "@things-factory/email-base@9.0.56",
    "@things-factory/email-base@9.0.57",
    "@things-factory/email-base@9.0.58",
    "@things-factory/email-base@9.0.59",
    "@things-factory/env@9.0.42",
    "@things-factory/env@9.0.43",
    "@things-factory/env@9.0.44",
    "@things-factory/env@9.0.45",
    "@things-factory/integration-base@9.0.42",
    "@things-factory/integration-base@9.0.43",
    "@things-factory/integration-base@9.0.44",
    "@things-factory/integration-base@9.0.45",
    "@things-factory/integration-marketplace@9.0.43",
    "@things-factory/integration-marketplace@9.0.44",
    "@things-factory/integration-marketplace@9.0.45",
    "@things-factory/shell@9.0.42",
    "@things-factory/shell@9.0.43",
    "@things-factory/shell@9.0.44",
    "@things-factory/shell@9.0.45",
    "@tnf-dev/api@1.0.8",
    "@tnf-dev/core@1.0.8",
    "@tnf-dev/js@1.0.8",
    "@tnf-dev/mui@1.0.8",
    "@tnf-dev/react@1.0.8",
    "@ui-ux-gang/devextreme-angular-rpk@24.1.7",
    "@yoobic/design-system@6.5.17",
    "@yoobic/jpeg-camera-es6@1.0.13",
    "@yoobic/yobi@8.7.53",
    "airchief@0.3.1",
    "airpilot@0.8.8",
    "angulartics2@14.1.1",
    "angulartics2@14.1.2",
    "browser-webdriver-downloader@3.0.8",
    "capacitor-notificationhandler@0.0.2",
    "capacitor-notificationhandler@0.0.3",
    "capacitor-plugin-healthapp@0.0.2",
    "capacitor-plugin-healthapp@0.0.3",
    "capacitor-plugin-ihealth@1.1.8",
    "capacitor-plugin-ihealth@1.1.9",
    "capacitor-plugin-vonage@1.0.2",
    "capacitor-plugin-vonage@1.0.3",
    "capacitorandroidpermissions@0.0.4",
    "capacitorandroidpermissions@0.0.5",
    "config-cordova@0.8.5",
    "cordova-plugin-voxeet2@1.0.24",
    "cordova-voxeet@1.0.32",
    "create-hest-app@0.1.9",
    "db-evo@1.1.4",
    "db-evo@1.1.5",
    "devextreme-angular-rpk@21.2.8",
    "ember-browser-services@5.0.2",
    "ember-browser-services@5.0.3",
    "ember-headless-form-yup@1.0.1",
    "ember-headless-form@1.1.2",
    "ember-headless-form@1.1.3",
    "ember-headless-table@2.1.5",
    "ember-headless-table@2.1.6",
    "ember-url-hash-polyfill@1.0.12",
    "ember-url-hash-polyfill@1.0.13",
    "ember-velcro@2.2.1",
    "ember-velcro@2.2.2",
    "encounter-playground@0.0.2",
    "encounter-playground@0.0.3",
    "encounter-playground@0.0.4",
    "encounter-playground@0.0.5",
    "eslint-config-crowdstrike-node@4.0.3",
    "eslint-config-crowdstrike-node@4.0.4",
    "eslint-config-crowdstrike@11.0.2",
    "eslint-config-crowdstrike@11.0.3",
    "slint-config-teselagen@6.1.7",
    "eslint-config-teselagen@6.1.8",
    "globalize-rpk@1.7.4",
    "graphql-sequelize-teselagen@5.3.8",
    "graphql-sequelize-teselagen@5.3.9",
    "html-to-base64-image@1.0.2",
    "json-rules-engine-simplified@0.2.1",
    "json-rules-engine-simplified@0.2.4",
    "jumpgate@0.0.2",
    "koa2-swagger-ui@5.11.1",
    "koa2-swagger-ui@5.11.2",
    "mcfly-semantic-release@1.3.1",
    "mcp-knowledge-base@0.0.2",
    "mcp-knowledge-graph@1.2.1",
    "mobioffice-cli@1.0.3",
    "monorepo-next@13.0.1",
    "monorepo-next@13.0.2",
    "mstate-angular@0.4.4",
    "mstate-cli@0.4.7",
    "mstate-dev-react@1.1.1",
    "mstate-react@1.6.5",
    "ng2-file-upload@7.0.2",
    "ng2-file-upload@7.0.3",
    "ng2-file-upload@8.0.1",
    "ng2-file-upload@8.0.2",
    "ng2-file-upload@8.0.3",
    "ng2-file-upload@9.0.1",
    "ngx-bootstrap@18.1.4",
    "ngx-bootstrap@19.0.3",
    "ngx-bootstrap@19.0.4",
    "ngx-bootstrap@20.0.3",
    "ngx-bootstrap@20.0.4",
    "ngx-bootstrap@20.0.5",
    "ngx-color@10.0.1",
    "ngx-color@10.0.2",
    "ngx-toastr@19.0.1",
    "ngx-toastr@19.0.2",
    "ngx-trend@8.0.1",
    "ngx-ws@1.1.5",
    "ngx-ws@1.1.6",
    "oradm-to-gql@35.0.14",
    "oradm-to-gql@35.0.15",
    "oradm-to-sqlz@1.1.2",
    "ove-auto-annotate@0.0.10",
    "ove-auto-annotate@0.0.9",
    "pm2-gelf-json@1.0.4",
    "pm2-gelf-json@1.0.5",
    "printjs-rpk@1.6.1",
    "react-complaint-image@0.0.32",
    "react-complaint-image@0.0.35",
    "react-jsonschema-form-conditionals@0.3.18",
    "react-jsonschema-form-conditionals@0.3.21",
    "react-jsonschema-form-extras@1.0.4",
    "react-jsonschema-rxnt-extras@0.4.9",
    "remark-preset-lint-crowdstrike@4.0.1",
    "remark-preset-lint-crowdstrike@4.0.2",
    "rxnt-authentication@0.0.3",
    "rxnt-authentication@0.0.4",
    "rxnt-authentication@0.0.5",
    "rxnt-authentication@0.0.6",
    "rxnt-healthchecks-nestjs@1.0.2",
    "rxnt-healthchecks-nestjs@1.0.3",
    "rxnt-healthchecks-nestjs@1.0.4",
    "rxnt-healthchecks-nestjs@1.0.5",
    "rxnt-kue@1.0.4",
    "rxnt-kue@1.0.5",
    "rxnt-kue@1.0.6",
    "rxnt-kue@1.0.7",
    "swc-plugin-component-annotate@1.9.1",
    "swc-plugin-component-annotate@1.9.2",
    "tbssnch@1.0.2",
    "teselagen-interval-tree@1.1.2",
    "tg-client-query-builder@2.14.4",
    "tg-client-query-builder@2.14.5",
    "tg-redbird@1.3.1",
    "tg-redbird@1.3.2",
    "tg-seq-gen@1.0.10",
    "tg-seq-gen@1.0.9",
    "thangved-react-grid@1.0.3",
    "ts-gaussian@3.0.5",
    "ts-gaussian@3.0.6",
    "ts-imports@1.0.1",
    "ts-imports@1.0.2",
    "tvi-cli@0.1.5",
    "ve-bamreader@0.2.6",
    "ve-bamreader@0.2.7",
    "ve-editor@1.0.1",
    "ve-editor@1.0.2",
    "verror-extra@6.0.1",
    "voip-callkit@1.0.2",
    "voip-callkit@1.0.3",
    "wdio-web-reporter@0.1.3",
    "yargs-help-output@5.0.3",
    "yoo-styles@6.0.326",
    "@rxap/ngx-bootstrap@19.0.3",
    "@rxap/ngx-bootstrap@19.0.4",
    "eslint-config-teselagen@6.1.7"
  ]
  
}