Skip to content

Instantly share code, notes, and snippets.

@peterpeterparker
Last active September 18, 2025 07:55
Show Gist options
  • Select an option

  • Save peterpeterparker/52b7a38d242f58c0b79f83aeb6e5bcb0 to your computer and use it in GitHub Desktop.

Select an option

Save peterpeterparker/52b7a38d242f58c0b79f83aeb6e5bcb0 to your computer and use it in GitHub Desktop.
Check npm malwares
#!/bin/sh
# Original source: https://github.com/AndrewMohawk/RandomScripts/blob/main/scan_for_deps_qix-2025-08-09.sh
# - Enhanced with additional compromised libraries in supply-chain attacks.
# - Added some references
# - Count vulnerabilities
# - Review outputs to the terminal
# - Support for libraries scoped with @
echo "------------------------------------------------"
echo "🔎 Checking for potentially vulnerable packages..."
echo "------------------------------------------------"
found_vulnerabilities=0
check_package() {
package=$1
vulnerable_version=$2
echo "Package: $package"
echo "Vulnerable version: $vulnerable_version"
# Use npm ls to find installed versions
installed_versions=$(npm ls "$package" --all --depth=Infinity 2>/dev/null \
| grep -F "$package@" \
| sed -E "s|^.*$package@([^ ]+).*$|\1|" \
| sort -u)
if [ -z "$installed_versions" ]; then
echo "ℹ️ Not found"
else
echo "Installed version(s):"
echo "$installed_versions" | sed 's/^/ - /'
if echo "$installed_versions" | grep -qx "$vulnerable_version"; then
echo "⚠️ Vulnerable package detected: $package@$vulnerable_version"
found_vulnerabilities=$((found_vulnerabilities+1))
else
echo "🟢 Not vulnerable"
fi
fi
echo "------------------------------------------------"
}
# https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
check_package "backslash" "0.2.1"
check_package "chalk" "5.6.1"
check_package "chalk-template" "1.1.1"
check_package "color-convert" "3.1.1"
check_package "color-name" "2.0.1"
check_package "color-string" "2.1.1"
check_package "wrap-ansi" "9.0.1"
check_package "supports-hyperlinks" "4.1.1"
check_package "strip-ansi" "7.1.1"
check_package "slice-ansi" "7.1.1"
check_package "simple-swizzle" "0.2.3"
check_package "is-arrayish" "0.3.3"
check_package "error-ex" "1.3.3"
check_package "ansi-regex" "6.2.1"
check_package "ansi-styles" "6.2.2"
check_package "supports-color" "10.2.1"
check_package "debug" "4.4.2"
check_package "color" "5.0.1"
check_package "has-ansi" "6.0.1"
# https://socket.dev/blog/duckdb-npm-account-compromised-in-continuing-supply-chain-attack
check_package "duckdb" "1.3.3"
check_package "@duckdb/duckdb-wasm" "1.29.2"
check_package "@duckdb/node-api" "1.3.3"
check_package "@duckdb/node-bindings" "1.3.3"
check_package "prebid" "10.9.1"
check_package "prebid" "10.9.2"
check_package "@coveops/abi" "2.0.1"
# https://socket.dev/blog/tinycolor-supply-chain-attack-affects-40-packages
check_package "angulartics2" "14.1.2"
check_package "@ctrl/deluge" "7.2.2"
check_package "@ctrl/golang-template" "1.4.3"
check_package "@ctrl/magnet-link" "4.0.4"
check_package "@ctrl/ngx-codemirror" "7.0.2"
check_package "@ctrl/ngx-csv" "6.0.2"
check_package "@ctrl/ngx-emoji-mart" "9.2.2"
check_package "@ctrl/ngx-rightclick" "4.0.2"
check_package "@ctrl/qbittorrent" "9.7.2"
check_package "@ctrl/react-adsense" "2.0.2"
check_package "@ctrl/shared-torrent" "6.3.2"
check_package "@ctrl/tinycolor" "4.1.1"
check_package "@ctrl/tinycolor" "4.1.2"
check_package "@ctrl/torrent-file" "4.1.2"
check_package "@ctrl/transmission" "7.3.1"
check_package "@ctrl/ts-base32" "4.0.2"
check_package "encounter-playground" "0.0.5"
check_package "json-rules-engine-simplified" "0.2.1"
check_package "json-rules-engine-simplified" "0.2.4"
check_package "koa2-swagger-ui" "5.11.1"
check_package "koa2-swagger-ui" "5.11.2"
check_package "@nativescript-community/gesturehandler" "2.0.35"
check_package "@nativescript-community/sentry" "4.6.43"
check_package "@nativescript-community/text" "1.6.13"
check_package "@nativescript-community/ui-collectionview" "6.0.6"
check_package "@nativescript-community/ui-drawer" "0.1.30"
check_package "@nativescript-community/ui-image" "4.5.6"
check_package "@nativescript-community/ui-material-bottomsheet" "7.2.72"
check_package "@nativescript-community/ui-material-core" "7.2.76"
check_package "@nativescript-community/ui-material-core-tabs" "7.2.76"
check_package "ngx-color" "10.0.2"
check_package "ngx-toastr" "19.0.2"
check_package "ngx-trend" "8.0.1"
check_package "react-complaint-image" "0.0.35"
check_package "react-jsonschema-form-conditionals" "0.3.21"
check_package "react-jsonschema-form-extras" "1.0.4"
check_package "rxnt-authentication" "0.0.6"
check_package "rxnt-healthchecks-nestjs" "1.0.5"
check_package "rxnt-kue" "1.0.7"
check_package "swc-plugin-component-annotate" "1.9.2"
check_package "ts-gaussian" "3.0.6"
# https://socket.dev/blog/ongoing-supply-chain-attack-targets-crowdstrike-npm-packages
check_package "@ahmedhfarag/ngx-perfect-scrollbar" "20.0.20"
check_package "@ahmedhfarag/ngx-virtual-scroller" "4.0.4"
check_package "@art-ws/common" "2.0.28"
check_package "@art-ws/config-eslint" "2.0.4"
check_package "@art-ws/config-eslint" "2.0.5"
check_package "@art-ws/config-ts" "2.0.7"
check_package "@art-ws/config-ts" "2.0.8"
check_package "@art-ws/db-context" "2.0.24"
check_package "@art-ws/di-node" "2.0.13"
check_package "@art-ws/di" "2.0.28"
check_package "@art-ws/di" "2.0.32"
check_package "@art-ws/eslint" "1.0.5"
check_package "@art-ws/eslint" "1.0.6"
check_package "@art-ws/fastify-http-server" "2.0.24"
check_package "@art-ws/fastify-http-server" "2.0.27"
check_package "@art-ws/http-server" "2.0.21"
check_package "@art-ws/http-server" "2.0.25"
check_package "@art-ws/openapi" "0.1.12"
check_package "@art-ws/openapi" "0.1.9"
check_package "@art-ws/package-base" "1.0.5"
check_package "@art-ws/package-base" "1.0.6"
check_package "@art-ws/prettier" "1.0.5"
check_package "@art-ws/prettier" "1.0.6"
check_package "@art-ws/slf" "2.0.15"
check_package "@art-ws/slf" "2.0.22"
check_package "@art-ws/ssl-info" "1.0.10"
check_package "@art-ws/ssl-info" "1.0.9"
check_package "@art-ws/web-app" "1.0.3"
check_package "@art-ws/web-app" "1.0.4"
check_package "@crowdstrike/commitlint" "8.1.1"
check_package "@crowdstrike/commitlint" "8.1.2"
check_package "@crowdstrike/falcon-shoelace" "0.4.1"
check_package "@crowdstrike/falcon-shoelace" "0.4.2"
check_package "@crowdstrike/foundry-js" "0.19.1"
check_package "@crowdstrike/foundry-js" "0.19.2"
check_package "@crowdstrike/glide-core" "0.34.2"
check_package "@crowdstrike/glide-core" "0.34.3"
check_package "@crowdstrike/logscale-dashboard" "1.205.1"
check_package "@crowdstrike/logscale-dashboard" "1.205.2"
check_package "@crowdstrike/logscale-file-editor" "1.205.1"
check_package "@crowdstrike/logscale-file-editor" "1.205.2"
check_package "@crowdstrike/logscale-parser-edit" "1.205.1"
check_package "@crowdstrike/logscale-parser-edit" "1.205.2"
check_package "@crowdstrike/logscale-search" "1.205.1"
check_package "@crowdstrike/logscale-search" "1.205.2"
check_package "@crowdstrike/tailwind-toucan-base" "5.0.1"
check_package "@crowdstrike/tailwind-toucan-base" "5.0.2"
check_package "@ctrl/deluge" "7.2.1"
check_package "@ctrl/deluge" "7.2.2"
check_package "@ctrl/golang-template" "1.4.2"
check_package "@ctrl/golang-template" "1.4.3"
check_package "@ctrl/magnet-link" "4.0.3"
check_package "@ctrl/magnet-link" "4.0.4"
check_package "@ctrl/ngx-codemirror" "7.0.1"
check_package "@ctrl/ngx-codemirror" "7.0.2"
check_package "@ctrl/ngx-csv" "6.0.1"
check_package "@ctrl/ngx-csv" "6.0.2"
check_package "@ctrl/ngx-emoji-mart" "9.2.1"
check_package "@ctrl/ngx-emoji-mart" "9.2.2"
check_package "@ctrl/ngx-rightclick" "4.0.1"
check_package "@ctrl/ngx-rightclick" "4.0.2"
check_package "@ctrl/qbittorrent" "9.7.1"
check_package "@ctrl/qbittorrent" "9.7.2"
check_package "@ctrl/react-adsense" "2.0.1"
check_package "@ctrl/react-adsense" "2.0.2"
check_package "@ctrl/shared-torrent" "6.3.1"
check_package "@ctrl/shared-torrent" "6.3.2"
check_package "@ctrl/tinycolor" "4.1.1"
check_package "@ctrl/tinycolor" "4.1.2"
check_package "@ctrl/torrent-file" "4.1.1"
check_package "@ctrl/torrent-file" "4.1.2"
check_package "@ctrl/transmission" "7.3.1"
check_package "@ctrl/ts-base32" "4.0.1"
check_package "@ctrl/ts-base32" "4.0.2"
check_package "@hestjs/core" "0.2.1"
check_package "@hestjs/cqrs" "0.1.6"
check_package "@hestjs/demo" "0.1.2"
check_package "@hestjs/eslint-config" "0.1.2"
check_package "@hestjs/logger" "0.1.6"
check_package "@hestjs/scalar" "0.1.7"
check_package "@hestjs/validation" "0.1.6"
check_package "@nativescript-community/arraybuffers" "1.1.6"
check_package "@nativescript-community/arraybuffers" "1.1.7"
check_package "@nativescript-community/arraybuffers" "1.1.8"
check_package "@nativescript-community/gesturehandler" "2.0.35"
check_package "@nativescript-community/perms" "3.0.5"
check_package "@nativescript-community/perms" "3.0.6"
check_package "@nativescript-community/perms" "3.0.7"
check_package "@nativescript-community/perms" "3.0.8"
check_package "@nativescript-community/sentry" "4.6.43"
check_package "@nativescript-community/sqlite" "3.5.2"
check_package "@nativescript-community/sqlite" "3.5.3"
check_package "@nativescript-community/sqlite" "3.5.4"
check_package "@nativescript-community/sqlite" "3.5.5"
check_package "@nativescript-community/text" "1.6.10"
check_package "@nativescript-community/text" "1.6.11"
check_package "@nativescript-community/text" "1.6.12"
check_package "@nativescript-community/text" "1.6.13"
check_package "@nativescript-community/text" "1.6.9"
check_package "@nativescript-community/typeorm" "0.2.30"
check_package "@nativescript-community/typeorm" "0.2.31"
check_package "@nativescript-community/typeorm" "0.2.32"
check_package "@nativescript-community/typeorm" "0.2.33"
check_package "@nativescript-community/ui-collectionview" "6.0.6"
check_package "@nativescript-community/ui-document-picker" "1.1.27"
check_package "@nativescript-community/ui-document-picker" "1.1.28"
check_package "@nativescript-community/ui-drawer" "0.1.30"
check_package "@nativescript-community/ui-image" "4.5.6"
check_package "@nativescript-community/ui-label" "1.3.35"
check_package "@nativescript-community/ui-label" "1.3.36"
check_package "@nativescript-community/ui-label" "1.3.37"
check_package "@nativescript-community/ui-material-bottom-navigation" "7.2.72"
check_package "@nativescript-community/ui-material-bottom-navigation" "7.2.73"
check_package "@nativescript-community/ui-material-bottom-navigation" "7.2.74"
check_package "@nativescript-community/ui-material-bottom-navigation" "7.2.75"
check_package "@nativescript-community/ui-material-bottomsheet" "7.2.72"
check_package "@nativescript-community/ui-material-core-tabs" "7.2.72"
check_package "@nativescript-community/ui-material-core-tabs" "7.2.73"
check_package "@nativescript-community/ui-material-core-tabs" "7.2.74"
check_package "@nativescript-community/ui-material-core-tabs" "7.2.75"
check_package "@nativescript-community/ui-material-core-tabs" "7.2.76"
check_package "@nativescript-community/ui-material-core" "7.2.72"
check_package "@nativescript-community/ui-material-core" "7.2.73"
check_package "@nativescript-community/ui-material-core" "7.2.74"
check_package "@nativescript-community/ui-material-core" "7.2.75"
check_package "@nativescript-community/ui-material-core" "7.2.76"
check_package "@nativescript-community/ui-material-ripple" "7.2.72"
check_package "@nativescript-community/ui-material-ripple" "7.2.73"
check_package "@nativescript-community/ui-material-ripple" "7.2.74"
check_package "@nativescript-community/ui-material-ripple" "7.2.75"
check_package "@nativescript-community/ui-material-tabs" "7.2.72"
check_package "@nativescript-community/ui-material-tabs" "7.2.73"
check_package "@nativescript-community/ui-material-tabs" "7.2.74"
check_package "@nativescript-community/ui-material-tabs" "7.2.75"
check_package "@nativescript-community/ui-pager" "14.1.36"
check_package "@nativescript-community/ui-pager" "14.1.37"
check_package "@nativescript-community/ui-pager" "14.1.38"
check_package "@nativescript-community/ui-pulltorefresh" "2.5.4"
check_package "@nativescript-community/ui-pulltorefresh" "2.5.5"
check_package "@nativescript-community/ui-pulltorefresh" "2.5.6"
check_package "@nativescript-community/ui-pulltorefresh" "2.5.7"
check_package "@nexe/config-manager" "0.1.1"
check_package "@nexe/eslint-config" "0.1.1"
check_package "@nexe/logger" "0.1.3"
check_package "@nstudio/angular" "20.0.4"
check_package "@nstudio/angular" "20.0.5"
check_package "@nstudio/angular" "20.0.6"
check_package "@nstudio/focus" "20.0.4"
check_package "@nstudio/focus" "20.0.5"
check_package "@nstudio/focus" "20.0.6"
check_package "@nstudio/nativescript-checkbox" "2.0.6"
check_package "@nstudio/nativescript-checkbox" "2.0.7"
check_package "@nstudio/nativescript-checkbox" "2.0.8"
check_package "@nstudio/nativescript-checkbox" "2.0.9"
check_package "@nstudio/nativescript-loading-indicator" "5.0.1"
check_package "@nstudio/nativescript-loading-indicator" "5.0.2"
check_package "@nstudio/nativescript-loading-indicator" "5.0.3"
check_package "@nstudio/nativescript-loading-indicator" "5.0.4"
check_package "@nstudio/ui-collectionview" "5.1.11"
check_package "@nstudio/ui-collectionview" "5.1.12"
check_package "@nstudio/ui-collectionview" "5.1.13"
check_package "@nstudio/ui-collectionview" "5.1.14"
check_package "@nstudio/web-angular" "20.0.4"
check_package "@nstudio/web" "20.0.4"
check_package "@nstudio/xplat-utils" "20.0.5"
check_package "@nstudio/xplat-utils" "20.0.6"
check_package "@nstudio/xplat-utils" "20.0.7"
check_package "@nstudio/xplat" "20.0.5"
check_package "@nstudio/xplat" "20.0.6"
check_package "@nstudio/xplat" "20.0.7"
check_package "@operato/board" "9.0.36"
check_package "@operato/board" "9.0.37"
check_package "@operato/board" "9.0.38"
check_package "@operato/board" "9.0.39"
check_package "@operato/board" "9.0.40"
check_package "@operato/board" "9.0.41"
check_package "@operato/board" "9.0.42"
check_package "@operato/board" "9.0.43"
check_package "@operato/board" "9.0.44"
check_package "@operato/board" "9.0.45"
check_package "@operato/board" "9.0.46"
check_package "@operato/data-grist" "9.0.29"
check_package "@operato/data-grist" "9.0.35"
check_package "@operato/data-grist" "9.0.36"
check_package "@operato/data-grist" "9.0.37"
check_package "@operato/graphql" "9.0.22"
check_package "@operato/graphql" "9.0.35"
check_package "@operato/graphql" "9.0.36"
check_package "@operato/graphql" "9.0.37"
check_package "@operato/graphql" "9.0.38"
check_package "@operato/graphql" "9.0.39"
check_package "@operato/graphql" "9.0.40"
check_package "@operato/graphql" "9.0.41"
check_package "@operato/graphql" "9.0.42"
check_package "@operato/graphql" "9.0.43"
check_package "@operato/graphql" "9.0.44"
check_package "@operato/graphql" "9.0.45"
check_package "@operato/graphql" "9.0.46"
check_package "@operato/headroom" "9.0.2"
check_package "@operato/headroom" "9.0.35"
check_package "@operato/headroom" "9.0.36"
check_package "@operato/headroom" "9.0.37"
check_package "@operato/help" "9.0.35"
check_package "@operato/help" "9.0.36"
check_package "@operato/help" "9.0.37"
check_package "@operato/help" "9.0.38"
check_package "@operato/help" "9.0.39"
check_package "@operato/help" "9.0.40"
check_package "@operato/help" "9.0.41"
check_package "@operato/help" "9.0.42"
check_package "@operato/help" "9.0.43"
check_package "@operato/help" "9.0.44"
check_package "@operato/help" "9.0.45"
check_package "@operato/help" "9.0.46"
check_package "@operato/i18n" "9.0.35"
check_package "@operato/i18n" "9.0.36"
check_package "@operato/i18n" "9.0.37"
check_package "@operato/input" "9.0.27"
check_package "@operato/input" "9.0.35"
check_package "@operato/input" "9.0.36"
check_package "@operato/input" "9.0.37"
check_package "@operato/input" "9.0.38"
check_package "@operato/input" "9.0.39"
check_package "@operato/input" "9.0.40"
check_package "@operato/input" "9.0.41"
check_package "@operato/input" "9.0.42"
check_package "@operato/input" "9.0.43"
check_package "@operato/input" "9.0.44"
check_package "@operato/input" "9.0.45"
check_package "@operato/input" "9.0.46"
check_package "@operato/input" "9.0.47"
check_package "@operato/input" "9.0.48"
check_package "@operato/layout" "9.0.35"
check_package "@operato/layout" "9.0.36"
check_package "@operato/layout" "9.0.37"
check_package "@operato/popup" "9.0.22"
check_package "@operato/popup" "9.0.35"
check_package "@operato/popup" "9.0.36"
check_package "@operato/popup" "9.0.37"
check_package "@operato/popup" "9.0.38"
check_package "@operato/popup" "9.0.39"
check_package "@operato/popup" "9.0.40"
check_package "@operato/popup" "9.0.41"
check_package "@operato/popup" "9.0.42"
check_package "@operato/popup" "9.0.43"
check_package "@operato/popup" "9.0.44"
check_package "@operato/popup" "9.0.45"
check_package "@operato/popup" "9.0.46"
check_package "@operato/popup" "9.0.49"
check_package "@operato/pull-to-refresh" "9.0.36"
check_package "@operato/pull-to-refresh" "9.0.37"
check_package "@operato/pull-to-refresh" "9.0.38"
check_package "@operato/pull-to-refresh" "9.0.39"
check_package "@operato/pull-to-refresh" "9.0.40"
check_package "@operato/pull-to-refresh" "9.0.41"
check_package "@operato/pull-to-refresh" "9.0.42"
check_package "@operato/shell" "9.0.22"
check_package "@operato/shell" "9.0.35"
check_package "@operato/shell" "9.0.36"
check_package "@operato/shell" "9.0.37"
check_package "@operato/shell" "9.0.38"
check_package "@operato/shell" "9.0.39"
check_package "@operato/styles" "9.0.2"
check_package "@operato/styles" "9.0.35"
check_package "@operato/styles" "9.0.36"
check_package "@operato/styles" "9.0.37"
check_package "@operato/utils" "9.0.22"
check_package "@operato/utils" "9.0.35"
check_package "@operato/utils" "9.0.36"
check_package "@operato/utils" "9.0.37"
check_package "@operato/utils" "9.0.38"
check_package "@operato/utils" "9.0.39"
check_package "@operato/utils" "9.0.40"
check_package "@operato/utils" "9.0.41"
check_package "@operato/utils" "9.0.42"
check_package "@operato/utils" "9.0.43"
check_package "@operato/utils" "9.0.44"
check_package "@operato/utils" "9.0.45"
check_package "@operato/utils" "9.0.46"
check_package "@operato/utils" "9.0.49"
check_package "@teselagen/bio-parsers" "0.4.30"
check_package "@teselagen/bounce-loader" "0.3.16"
check_package "@teselagen/bounce-loader" "0.3.17"
check_package "@teselagen/file-utils" "0.3.22"
check_package "@teselagen/liquibase-tools" "0.4.1"
check_package "@teselagen/ove" "0.7.40"
check_package "@teselagen/range-utils" "0.3.14"
check_package "@teselagen/range-utils" "0.3.15"
check_package "@teselagen/react-list" "0.8.19"
check_package "@teselagen/react-list" "0.8.20"
check_package "@teselagen/react-table" "6.10.19"
check_package "@teselagen/react-table" "6.10.20"
check_package "@teselagen/react-table" "6.10.22"
check_package "@teselagen/sequence-utils" "0.3.34"
check_package "@teselagen/ui" "0.9.10"
check_package "@thangved/callback-window" "1.1.4"
check_package "@things-factory/attachment-base" "9.0.43"
check_package "@things-factory/attachment-base" "9.0.44"
check_package "@things-factory/attachment-base" "9.0.45"
check_package "@things-factory/attachment-base" "9.0.46"
check_package "@things-factory/attachment-base" "9.0.47"
check_package "@things-factory/attachment-base" "9.0.48"
check_package "@things-factory/attachment-base" "9.0.49"
check_package "@things-factory/attachment-base" "9.0.50"
check_package "@things-factory/auth-base" "9.0.43"
check_package "@things-factory/auth-base" "9.0.44"
check_package "@things-factory/auth-base" "9.0.45"
check_package "@things-factory/email-base" "9.0.42"
check_package "@things-factory/email-base" "9.0.43"
check_package "@things-factory/email-base" "9.0.44"
check_package "@things-factory/email-base" "9.0.45"
check_package "@things-factory/email-base" "9.0.46"
check_package "@things-factory/email-base" "9.0.47"
check_package "@things-factory/email-base" "9.0.48"
check_package "@things-factory/email-base" "9.0.49"
check_package "@things-factory/email-base" "9.0.50"
check_package "@things-factory/email-base" "9.0.51"
check_package "@things-factory/email-base" "9.0.52"
check_package "@things-factory/email-base" "9.0.53"
check_package "@things-factory/email-base" "9.0.54"
check_package "@things-factory/env" "9.0.42"
check_package "@things-factory/env" "9.0.43"
check_package "@things-factory/env" "9.0.44"
check_package "@things-factory/env" "9.0.45"
check_package "@things-factory/integration-base" "9.0.43"
check_package "@things-factory/integration-base" "9.0.44"
check_package "@things-factory/integration-base" "9.0.45"
check_package "@things-factory/integration-marketplace" "9.0.43"
check_package "@things-factory/integration-marketplace" "9.0.44"
check_package "@things-factory/integration-marketplace" "9.0.45"
check_package "@things-factory/shell" "9.0.43"
check_package "@things-factory/shell" "9.0.44"
check_package "@things-factory/shell" "9.0.45"
check_package "@tnf-dev/api" "1.0.8"
check_package "@tnf-dev/core" "1.0.8"
check_package "@tnf-dev/js" "1.0.8"
check_package "@tnf-dev/mui" "1.0.8"
check_package "@tnf-dev/react" "1.0.8"
check_package "@ui-ux-gang/devextreme-angular-rpk" "24.1.7"
check_package "@yoobic/design-system" "6.5.17"
check_package "@yoobic/jpeg-camera-es6" "1.0.13"
check_package "@yoobic/yobi" "8.7.53"
check_package "airchief" "0.3.1"
check_package "airpilot" "0.8.8"
check_package "angulartics2" "14.1.1"
check_package "angulartics2" "14.1.2"
check_package "browser-webdriver-downloader" "3.0.8"
check_package "capacitor-notificationhandler" "0.0.2"
check_package "capacitor-notificationhandler" "0.0.3"
check_package "capacitor-plugin-healthapp" "0.0.2"
check_package "capacitor-plugin-healthapp" "0.0.3"
check_package "capacitor-plugin-ihealth" "1.1.8"
check_package "capacitor-plugin-ihealth" "1.1.9"
check_package "capacitor-plugin-vonage" "1.0.2"
check_package "capacitor-plugin-vonage" "1.0.3"
check_package "capacitorandroidpermissions" "0.0.4"
check_package "capacitorandroidpermissions" "0.0.5"
check_package "config-cordova" "0.8.5"
check_package "cordova-plugin-voxeet2" "1.0.24"
check_package "cordova-voxeet" "1.0.32"
check_package "create-hest-app" "0.1.9"
check_package "db-evo" "1.1.4"
check_package "db-evo" "1.1.5"
check_package "devextreme-angular-rpk" "21.2.8"
check_package "ember-browser-services" "5.0.2"
check_package "ember-browser-services" "5.0.3"
check_package "ember-headless-form-yup" "1.0.1"
check_package "ember-headless-form" "1.1.2"
check_package "ember-headless-form" "1.1.3"
check_package "ember-headless-table" "2.1.5"
check_package "ember-headless-table" "2.1.6"
check_package "ember-url-hash-polyfill" "1.0.12"
check_package "ember-url-hash-polyfill" "1.0.13"
check_package "ember-velcro" "2.2.1"
check_package "ember-velcro" "2.2.2"
check_package "encounter-playground" "0.0.2"
check_package "encounter-playground" "0.0.3"
check_package "encounter-playground" "0.0.4"
check_package "encounter-playground" "0.0.5"
check_package "eslint-config-crowdstrike-node" "4.0.3"
check_package "eslint-config-crowdstrike-node" "4.0.4"
check_package "eslint-config-crowdstrike" "11.0.2"
check_package "eslint-config-crowdstrike" "11.0.3"
check_package "eslint-config-teselagen" "6.1.7"
check_package "eslint-config-teselagen" "6.1.8"
check_package "globalize-rpk" "1.7.4"
check_package "graphql-sequelize-teselagen" "5.3.8"
check_package "graphql-sequelize-teselagen" "5.3.9"
check_package "html-to-base64-image" "1.0.2"
check_package "json-rules-engine-simplified" "0.2.1"
check_package "json-rules-engine-simplified" "0.2.4"
check_package "jumpgate" "0.0.2"
check_package "koa2-swagger-ui" "5.11.1"
check_package "koa2-swagger-ui" "5.11.2"
check_package "mcfly-semantic-release" "1.3.1"
check_package "mcp-knowledge-base" "0.0.2"
check_package "mcp-knowledge-graph" "1.2.1"
check_package "mobioffice-cli" "1.0.3"
check_package "monorepo-next" "13.0.1"
check_package "monorepo-next" "13.0.2"
check_package "mstate-angular" "0.4.4"
check_package "mstate-cli" "0.4.7"
check_package "mstate-dev-react" "1.1.1"
check_package "mstate-react" "1.6.5"
check_package "ng2-file-upload" "7.0.2"
check_package "ng2-file-upload" "7.0.3"
check_package "ng2-file-upload" "8.0.1"
check_package "ng2-file-upload" "8.0.2"
check_package "ng2-file-upload" "8.0.3"
check_package "ng2-file-upload" "9.0.1"
check_package "ngx-bootstrap" "18.1.4"
check_package "ngx-bootstrap" "19.0.3"
check_package "ngx-bootstrap" "19.0.4"
check_package "ngx-bootstrap" "20.0.3"
check_package "ngx-bootstrap" "20.0.4"
check_package "ngx-bootstrap" "20.0.5"
check_package "ngx-color" "10.0.1"
check_package "ngx-color" "10.0.2"
check_package "ngx-toastr" "19.0.1"
check_package "ngx-toastr" "19.0.2"
check_package "ngx-trend" "8.0.1"
check_package "ngx-ws" "1.1.5"
check_package "ngx-ws" "1.1.6"
check_package "oradm-to-gql" "35.0.14"
check_package "oradm-to-gql" "35.0.15"
check_package "oradm-to-sqlz" "1.1.2"
check_package "ove-auto-annotate" "0.0.10"
check_package "ove-auto-annotate" "0.0.9"
check_package "pm2-gelf-json" "1.0.4"
check_package "pm2-gelf-json" "1.0.5"
check_package "printjs-rpk" "1.6.1"
check_package "react-complaint-image" "0.0.32"
check_package "react-complaint-image" "0.0.35"
check_package "react-jsonschema-form-conditionals" "0.3.18"
check_package "react-jsonschema-form-conditionals" "0.3.21"
check_package "react-jsonschema-form-extras" "1.0.4"
check_package "react-jsonschema-rxnt-extras" "0.4.9"
check_package "remark-preset-lint-crowdstrike" "4.0.1"
check_package "remark-preset-lint-crowdstrike" "4.0.2"
check_package "rxnt-authentication" "0.0.3"
check_package "rxnt-authentication" "0.0.4"
check_package "rxnt-authentication" "0.0.5"
check_package "rxnt-authentication" "0.0.6"
check_package "rxnt-healthchecks-nestjs" "1.0.2"
check_package "rxnt-healthchecks-nestjs" "1.0.3"
check_package "rxnt-healthchecks-nestjs" "1.0.4"
check_package "rxnt-healthchecks-nestjs" "1.0.5"
check_package "rxnt-kue" "1.0.4"
check_package "rxnt-kue" "1.0.5"
check_package "rxnt-kue" "1.0.6"
check_package "rxnt-kue" "1.0.7"
check_package "swc-plugin-component-annotate" "1.9.1"
check_package "swc-plugin-component-annotate" "1.9.2"
check_package "tbssnch" "1.0.2"
check_package "teselagen-interval-tree" "1.1.2"
check_package "tg-client-query-builder" "2.14.4"
check_package "tg-client-query-builder" "2.14.5"
check_package "tg-redbird" "1.3.1"
check_package "tg-redbird" "1.3.2"
check_package "tg-seq-gen" "1.0.10"
check_package "tg-seq-gen" "1.0.9"
check_package "thangved-react-grid" "1.0.3"
check_package "ts-gaussian" "3.0.5"
check_package "ts-gaussian" "3.0.6"
check_package "ts-imports" "1.0.1"
check_package "ts-imports" "1.0.2"
check_package "tvi-cli" "0.1.5"
check_package "ve-bamreader" "0.2.6"
check_package "ve-bamreader" "0.2.7"
check_package "ve-editor" "1.0.1"
check_package "ve-editor" "1.0.2"
check_package "verror-extra" "6.0.1"
check_package "voip-callkit" "1.0.2"
check_package "voip-callkit" "1.0.3"
check_package "wdio-web-reporter" "0.1.3"
check_package "yargs-help-output" "5.0.3"
check_package "yoo-styles" "6.0.326"
if [ "$found_vulnerabilities" -gt 0 ]; then
echo "😱 $found_vulnerabilities vulnerable package(s) detected!"
exit 1
else
echo "✅ No vulnerable packages detected."
exit 0
fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment