Worms are Back
ChainDrop is an automated npm compromise campaign first observed on 2026-08-04, with the earliest known malicious release being keyv@6.0.0 at 09:35:00Z. Similar to other npm worms we’ve seen this year, rather than targeting a single maintainer, this worm republishes existing, legitimate packages under hijacked maintainer credentials across many unrelated scopes. That spread contributed to 1,557 malicious versions appearing in a burst of roughly two hours (09:40 to 11:44 UTC)
Every compromised release follows the same well-wormed approach as Shai Hulud. The tarball adds obfuscated loader files (observed as setup.mjs and math_init.js) and wires them into the package's preinstall lifecycle hook, so the code runs during dependency resolution rather than at import time. Merely installing or restoring the dependency tree is enough to execute it; the package never has to be required by application code. Similar to mini-Shai Hulud the loader downloads a second stage with the malware using bun.
The second stage is, to no one’s surprise a credential harvester aimed at developer workstations and CI/CD runners: including npm authentication tokens, cloud provider credentials (AWS IMDS/ECS, Vault, Kubernetes), SSH private keys, GitHub Actions secrets and tokens, and CI secrets exposed in the build environment.
It wouldn’t be a worm without spreading and this worm also looks for and uses npm tokens to propagate. Each successful harvest supplies the publishing rights for the next wave. Moving away from GitHub, its command-and-control endpoint uses an Ethereum dead-drop, letting operators repoint infrastructure without shipping a hardcoded domain.
For Semgrep Customers
Trigger a new scan if you haven't recently on your projects
View the findings page to see if you are impacted https://semgrep.dev/orgs/-/supply-chain/t/all?f=CgAqAEIASgBaAHIAigEP8twT8dwT8NwT79wT7twTogEAqgEAsgEAugEA0gEA2gEA4gEA6gEA%2BgEAiAIBkgIAmgIAugIA8gIA%2BgIAggMAigMAmgMBAaIDAKoDALoDAA%3D%3D
Indicators of Compromise
If you’re not a Semgrep customer, we recommend looking for the following IoCs on suspected devices, if you are ignoring install scripts or using v12 of npm that blocks these by default you will not be affected.
File hashes (SHA-256):
9fc2570b7cef51c1b8df116d144d11ff4096357be7d2c4c6367cfc2509cf1bcc(stage-2 Bun-bundled harvester, 727,680 B, ships asMath_Symbol.js/math_init.js);54dc7ea54a1317cca0e890a2770630cf7fa6c97813e0cb9d2caa93012b350668(loader A,setup.mjs, 29,918 B, always exits 0);fd3ca4007b225fdf8de7af4345a19179d5efa8c4bb9205f88cda806e5684b1eb(loader B,setup.mjs, 11,017 B, exits non-zero on error)Install hook: preinstall set to node
setup.mjson a version that never previously carried an install script; the scriptsblock is wholesale replaced, not appended toLoader filenames:
setup.mjs,math_init.js,Math_Symbol.js— camouflage only, never match on filename aloneInterpreter fetch: requests to
github.com/oven-sh/bun/releases/download/bun-v1.3.13/and the string bun-v1.3.13 in build/proxy logs (legitimate URL, but the pinned version is a reliable signal; the loader ships no novel C2 domain)Drop/staging paths:
bun-dl-*directories under the OS temp dir (created via mkdtempSync)Added-byte fingerprint: exactly 757,598 added file bytes (loader A) or 738,697 (loader B); poisoned
package.jsonshrinks 475–579 bytes, so use a size floor around 737,500Packument tells:
npmVersionandnodeVersionabsent on the malicious version but present on its clean predecessor; payload files present that the manifest's own "files" allowlist would exclude (e.g.@qlik/browserslist-config@3.0.2declaring"files": ["index.js"]yet shipping both payload files)Command-and-control: resolved via an Ethereum mainnet dead-drop rather than a hardcoded domain
Stage-2 credential targets: AWS IMDS 169.254.169.254, ECS 169.254.170.2,
~/.npmrc,~/.gitconfig, SSH private keys, GitHub Actions secrets;fulcio.sigstore.dev/rekor.sigstore.dev(republish-with-provenance tooling)CI marker: non-zero preinstall exits since 2026-08-04 09:35Z (loader B fails loudly, so blocked-but-attempted runs are visible in CI logs)
Triage test: a GA release with a new install hook whose distributed library code is byte-identical (SHA-256) to its own prior release candidate (
keyv@6.0.0vs6.0.0-rc.1)Campaign window: 2026-08-04, ~09:35–11:44 UTC; earliest known release
keyv@6.0.0
The full list of packages
@adminide-stack/clock-tik-browser@12.0.24
@adminide-stack/yantra-mobile@12.0.33
@arv-bedrock/auth@(1.1.7, 1.1.8)
@arv-bedrock/auth-admin@(1.0.2, 1.0.3)
@arv-bedrock/auth-sso@(1.6.1, 1.6.2)
@arv-bedrock/auth-sso-backend@(1.7.1, 1.7.2)
@arv-bedrock/logger@(1.7.1, 1.7.2)
@cacheable/memory@2.2.1
@cacheable/net@2.1.1
@cacheable/node-cache@3.1.2
@cacheable/utils@2.5.1
@deliveroo/determinator@0.2.1
@deliveroo/reevent@1.0.1
@hubsync/web-sdk-react@(6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.3.15, 6.3.16, 6.3.17, 6.3.18, 6.3.19, 6.3.20, 6.3.21, 6.3.22, 6.3.23, 6.3.24, 6.3.25, 6.3.26, 6.3.27, 6.3.28, 6.3.29, 6.3.30, 6.3.31, 6.3.32, 6.3.33)
@nebula.js/cli@7.1.2
@nebula.js/cli-build@7.1.2
@nebula.js/cli-sense@7.1.2
@nebula.js/cli-serve@7.1.2
@nebula.js/locale@0.6.2
@nebula.js/nucleus@0.5.1
@nebula.js/sn-action-button@2.3.1
@nebula.js/sn-animator@2.13.1
@nebula.js/sn-distributionplot@1.0.7
@nebula.js/sn-layout-container@4.4.1
@nebula.js/sn-line-chart@2.7.1
@nebula.js/sn-listbox@0.19.3
@nebula.js/sn-map@0.12.7
@nebula.js/sn-nav-menu@0.14.2
@nebula.js/sn-org-chart@1.7.1
@nebula.js/sn-shape@1.5.1
@nebula.js/sn-slider@0.20.1
@nebula.js/sn-tabbed-container@2.4.1
@nebula.js/snapshooter@0.6.1
@nebula.js/stardust@7.1.2
@nebula.js/test-utils@0.6.1
@nebula.js/theme@0.6.1
@onereach/authorizer-helper@(0.0.11, 0.0.12)
@onereach/bandwidth-steps-voice-bxml@(0.1.1, 0.1.2)
@onereach/billing-dto@27.2.1
@onereach/billing-shared@(27.2.1, 27.2.2)
@onereach/cb-schema-translator@(1.3.1, 1.3.2)
@onereach/channel-transformer@(0.0.66, 0.0.67)
@onereach/channel-transformers@(0.0.5, 0.0.6)
@onereach/ckeditor5-build-classic@(30.0.1, 30.0.2)
@onereach/condition-builder@(1.0.8, 1.0.9)
@onereach/content-builder@(0.0.18, 0.0.19)
@onereach/content-builder-template-compiler@(0.0.3, 0.0.4)
@onereach/expression-components@(9.1.1, 9.1.2)
@onereach/font-icons@(27.0.2, 27.0.3)
@onereach/get-version-data@(3.1.2, 3.1.3)
@onereach/idw-apps@(0.1.3, 0.1.4)
@onereach/idw-contracts@(0.1.2, 0.1.3)
@onereach/idw-init-account-resources@(1.0.1, 1.0.2)
@onereach/idw-sdk@(0.1.2, 0.1.3)
@onereach/idw-ui-components@0.1.2
@onereach/lambda-invocation@(1.2.1, 1.2.2)
@onereach/messengers-infobip-sdk@(0.1.1, 0.1.2)
@onereach/or-browser@(0.0.48, 0.0.49)
@onereach/or-browser-next@(0.0.11, 0.0.12)
@onereach/or-content-builder-renderer@(0.0.2, 0.0.3)
@onereach/or-file-uploader-next@(0.0.8, 0.0.9)
@onereach/or-pro@(1.13.1, 1.13.2)
@onereach/or-sdk-agent-cli@0.0.7
@onereach/orest-cli@(2.4.1, 2.4.2)
@onereach/orest-input-cli@(1.18.1, 1.18.2)
@onereach/orest-jest-presets@(0.0.3, 0.0.4)
@onereach/orest-vue-demi-vue2@(0.0.4, 0.0.5)
@onereach/orest-vue-demi-vue3@(0.0.4, 0.0.5)
@onereach/orest-vue3@(0.0.4, 0.0.5)
@onereach/phonenumber-interpreter@(0.0.18, 0.0.19)
@onereach/pnpm-audit-junit@1.0.3
@onereach/postcss-scoped-selector@(1.2.1, 1.2.2)
@onereach/regex-helper@(0.5.16, 0.5.17)
@onereach/regular-expressions@(0.5.23, 0.5.24)
@onereach/regular-expressions-test@(0.0.4, 0.0.5)
@onereach/rwc-client@(6.4.7, 6.4.8)
@onereach/salesforce-miaw-client@(0.0.3, 0.0.4)
@onereach/si-a-button@(0.0.3, 0.0.4)
@onereach/si-alert@(0.4.11, 0.4.12)
@onereach/si-checkbox@(0.6.5, 0.6.6)
@onereach/si-checkbox-group@(0.3.5, 0.3.6)
@onereach/si-code@(0.6.4, 0.6.5)
@onereach/si-collapsible-group@(0.6.4, 0.6.5)
@onereach/si-copyable-text@(0.4.11, 0.4.12)
@onereach/si-datepicker@(0.4.5, 0.4.6)
@onereach/si-divider@0.4.11
@onereach/si-dropdown-advanced@(0.4.5, 0.4.6)
@onereach/si-dropdown-simple@(0.4.5, 0.4.6)
@onereach/si-header@(0.4.11, 0.4.12, 0.4.13)
@onereach/si-list@0.7.4
@onereach/si-merge-tag-input@0.4.5
@onereach/si-radio-group@(0.3.5, 0.3.6)
@onereach/si-root@(0.9.4, 0.9.5)
@onereach/si-select@(0.1.3, 0.1.4)
@onereach/si-step-chooser@(0.4.4, 0.4.5)
@onereach/si-switch@(0.4.5, 0.4.6)
@onereach/si-text-message@(0.4.5, 0.4.6)
@onereach/si-textinput@(0.5.5, 0.5.6)
@onereach/si-validated-timestring-input@(0.3.5, 0.3.6)
@onereach/slack-helpers@(1.0.3, 1.0.4)
@onereach/ssml-editor@(2.0.12, 2.0.13)
@onereach/step-components@0.1.37
@onereach/step-conversation@(1.0.41, 1.0.42)
@onereach/step-run-snowflake-query@(0.1.1, 0.1.2)
@onereach/step-voice@(7.0.32, 7.0.33)
@onereach/styles@27.0.2
@onereach/time-interpreter@(1.0.30, 1.0.31)
@onereach/ts-memoize@(1.0.2, 1.0.3)
@onereach/types-contacts-api@(9.0.8, 9.0.9)
@onereach/ui-components@(27.0.2, 27.0.3)
@onereach/ui-components-common@(27.0.2, 27.0.3)
@onereach/ui-components-vue2@(27.0.2, 27.0.3)
@onereach/v-event-calendar@(0.1.22, 0.1.23)
@onereach/webform@(0.3.13, 0.3.14)
@or-sdk/account-settings@(1.3.6, 1.3.7)
@or-sdk/accounts@2.3.5
@or-sdk/adapters@(0.3.6, 0.3.7)
@or-sdk/agents@(4.21.3, 4.21.4)
@or-sdk/api-tokens@(1.4.2, 1.4.3)
@or-sdk/api-tokens-lambda@1.4.2
@or-sdk/apps@(1.2.6, 1.2.7)
@or-sdk/auth@(0.38.1, 0.38.2)
@or-sdk/authorizer@(0.26.7, 0.26.8)
@or-sdk/base@(0.44.4, 0.44.5)
@or-sdk/billing@(27.2.1, 27.2.2)
@or-sdk/billing-internal@(27.2.1, 27.2.2)
@or-sdk/bot-templates@(2.2.5, 2.2.6)
@or-sdk/bots@(1.7.1, 1.7.2)
@or-sdk/card-templates@(2.2.5, 2.2.6)
@or-sdk/cards@(1.2.5, 1.2.6)
@or-sdk/ccp@(10.15.4, 10.15.5)
@or-sdk/chat@0.3.1
@or-sdk/contacts@(4.7.5, 4.7.6)
@or-sdk/content-request@(0.2.6, 0.2.7)
@or-sdk/data-hub@(0.26.5, 0.26.6)
@or-sdk/data-hub-svc@(2.3.5, 2.3.6)
@or-sdk/deployer@(1.7.5, 1.7.6)
@or-sdk/deployments@(2.1.5, 2.1.6)
@or-sdk/discovery@(1.12.1, 1.12.2)
@or-sdk/druid@(1.4.7, 1.4.8)
@or-sdk/event-manager@(1.1.5, 1.1.6)
@or-sdk/files@(3.11.6, 3.11.7)
@or-sdk/files-sync-node@(0.1.8, 0.1.9)
@or-sdk/flow-templates@(2.1.5, 2.1.6)
@or-sdk/flows@(2.7.8, 2.7.9)
@or-sdk/graph@(1.10.5, 1.10.6)
@or-sdk/hitl@(0.41.1, 0.41.2)
@or-sdk/identifiers@(0.27.6, 0.27.7)
@or-sdk/idw@(9.0.4, 9.0.5)
@or-sdk/idw-public@(1.6.6, 1.6.7)
@or-sdk/idw-skill@(1.4.1, 1.4.2)
@or-sdk/invitations@(1.4.8, 1.4.9)
@or-sdk/key-value-storage@(0.28.6, 0.28.7)
@or-sdk/keys@(1.2.6, 1.2.7)
@or-sdk/knowledge-models@(0.25.5, 0.25.6)
@or-sdk/library@(0.5.6, 0.5.7)
@or-sdk/library-categories@0.2.6
@or-sdk/library-source@(0.4.5, 0.4.6)
@or-sdk/library-types-v1@(9.0.1, 9.0.2)
@or-sdk/library-types-v2@(9.0.1, 9.0.2)
@or-sdk/lookup@(1.25.1, 1.25.2)
@or-sdk/markdowner@(0.5.1, 0.5.2)
@or-sdk/mcp-tools@(0.5.2, 0.5.3)
@or-sdk/notifications@(1.7.5, 1.7.6)
@or-sdk/password@(1.3.6, 1.3.7)
@or-sdk/payments@(3.2.5, 3.2.6)
@or-sdk/permissions@2.8.1
@or-sdk/permissions-cli@(1.4.1, 1.4.2)
@or-sdk/permissions-lambda@(2.5.1, 2.5.2)
@or-sdk/pgsql@(1.5.1, 1.5.2)
@or-sdk/providers@0.3.6
@or-sdk/qna@(3.4.2, 3.4.3)
@or-sdk/queue-manager@(1.4.6, 1.4.7)
@or-sdk/sdk-api@(0.29.2, 0.29.3)
@or-sdk/settings@(0.25.6, 0.25.7)
@or-sdk/sku-builder@(2.5.1, 2.5.2)
@or-sdk/source@(2.1.5, 2.1.6)
@or-sdk/source-api@(1.1.1, 1.1.2)
@or-sdk/step-templates@2.2.6
@or-sdk/store@(2.1.5, 2.1.6)
@or-sdk/tables@(0.28.5, 0.28.6)
@or-sdk/tags@(1.1.5, 1.1.6)
@or-sdk/tickets@(1.9.5, 1.9.6)
@or-sdk/transcripts@(1.2.5, 1.2.6)
@or-sdk/users@(3.8.1, 3.8.2)
@or-sdk/view-templates@(2.2.5, 2.2.6)
@or-sdk/views@(3.1.5, 3.1.6)
@or-sdk/web-search@(0.6.1, 0.6.2)
@ornikar/apollo-link-timeout@(1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6)
@ornikar/babel-preset-base@(6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.10)
@ornikar/babel-preset-kitt-universal@(8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8)
@ornikar/babel-preset-react@(6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 6.1.10)
@ornikar/browserslist-config@(8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9)
@ornikar/commitlint-config@(8.3.2, 8.3.3, 8.3.4, 8.3.5, 8.3.6, 8.3.7, 8.3.8)
@ornikar/eslint-config@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7, 24.0.8)
@ornikar/eslint-config-babel@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7, 24.0.8)
@ornikar/eslint-config-babel-use@(13.2.1, 13.2.2, 13.2.3, 13.2.4, 13.2.5, 13.2.6, 13.2.7, 13.2.8)
@ornikar/eslint-config-formatjs@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6)
@ornikar/eslint-config-node@(12.2.1, 12.2.2, 12.2.3, 12.2.4, 12.2.5, 12.2.6)
@ornikar/eslint-config-react@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7)
@ornikar/eslint-config-typescript@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6)
@ornikar/eslint-config-typescript-nestjs@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7)
@ornikar/eslint-config-typescript-react@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7)
@ornikar/eslint-plugin-neverthrow@(1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.3.8)
@ornikar/eslint-plugin-ornikar@(24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7)
@ornikar/graphql-config@(1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7)
@ornikar/intl-config@(10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8)
@ornikar/jest-config@(13.0.3, 13.0.4, 13.0.5, 13.0.6, 13.0.7, 13.0.8, 13.0.9)
@ornikar/jest-config-react@(18.0.2, 18.0.3, 18.0.4, 18.0.5, 18.0.6, 18.0.7, 18.0.8)
@ornikar/jest-config-react-native@(17.0.2, 17.0.3, 17.0.4, 17.0.5, 17.0.6, 17.0.7, 17.0.8)
@ornikar/jest-config-react-native-web@(12.0.3, 12.0.4, 12.0.5, 12.0.6, 12.0.7, 12.0.8, 12.0.9)
@ornikar/kitt2@(1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7)
@ornikar/lerna-config@(11.0.1, 11.0.2, 11.0.3, 11.0.4, 11.0.5, 11.0.6)
@ornikar/monorepo-config@(14.3.2, 14.3.3, 14.3.4, 14.3.5, 14.3.6, 14.3.7, 14.3.8, 14.3.9)
@ornikar/postcss-config@(9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.1.8)
@ornikar/prettier-config@(9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9)
@ornikar/prismic-components@(0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8)
@ornikar/react-modern-calendar-datepicker@(3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7)
@ornikar/react-native-svg-transformer@(1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11)
@ornikar/renovate-config@(9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9)
@ornikar/repo-config@(15.3.3, 15.3.4, 15.3.5, 15.3.6, 15.3.7, 15.3.8, 15.3.9)
@ornikar/repo-config-react@(13.0.8, 13.0.9, 13.0.10, 13.0.11, 13.0.12, 13.0.13, 13.0.14, 13.0.15)
@ornikar/repo-config-react-legacy-css@(15.1.2, 15.1.3, 15.1.4, 15.1.5, 15.1.6, 15.1.7, 15.1.8, 15.1.9)
@ornikar/rollup-config@(11.1.2, 11.1.3, 11.1.4, 11.1.5, 11.1.6, 11.1.7, 11.1.8, 11.1.9)
@ornikar/rollup-plugin-postcss@(2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11)
@ornikar/slate-react-fork@(1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7)
@ornikar/storybook-config@(12.1.2, 12.1.3, 12.1.4, 12.1.5, 12.1.6, 12.1.7)
@ornikar/stylelint-config@(14.0.3, 14.0.5, 14.0.6, 14.0.7, 14.0.8, 14.0.9)
@ornikar/typed-css-modules-loader@(0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8)
@ornikar/webpack-config@(12.0.2, 12.0.3, 12.0.4, 12.0.5, 12.0.6, 12.0.7, 12.0.8)
@picsart/ai-sdk@3.32.2
@picsart/gen-ai@2.55.11
@qlik/api@2.14.2
@qlik/browserslist-config@3.0.2
@qlik/carbon-core@2.1.1
@qlik/carboncopy@1.1.6
@qlik/design-tokens@1.3.13
@qlik/dts-bundler@2.0.3
@qlik/embed-react@2.5.3
@qlik/embed-runtime@1.6.4
@qlik/embed-svelte@1.1.4
@qlik/embed-web-components@1.7.3
@qlik/eslint-config@2.0.20
@qlik/eslint-config-base@0.1.1
@qlik/eslint-config-react@0.1.1
@qlik/eslint-config-svelte@0.1.1
@qlik/eslint-config-vue@0.1.1
@qlik/nebula-table-utils@2.6.9
@qlik/oxfmt-config@0.1.6
@qlik/oxlint-config@0.7.2
@qlik/prettier-config@1.0.3
@qlik/react-native-simple-grid@1.5.5
@qlik/runtime-module-loader@1.5.1
@qlik/sdk@0.28.1
@qlik/sprout-design-docs@1.0.2
@qlik/sprout-gesture@0.0.13
@qlik/sprout-icons@0.12.3
@qlik/sprout-react@6.45.3
@qlik/sprout-react-table@0.16.7
@qlik/tsconfig@1.0.3
@servicetitan/acquisition-functions@(5.22.1, 5.22.2, 5.22.3, 5.22.4, 5.22.5)
@servicetitan/admin-layout@(2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7)
@servicetitan/admin-sql-table@(1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18)
@servicetitan/ajax-handlers@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/anvil-css-utilities@(14.5.4, 14.5.5, 14.5.6, 14.5.7, 14.5.8)
@servicetitan/anvil-fonts@(14.5.4, 14.5.5, 14.5.6, 14.5.7, 14.5.8)
@servicetitan/anvil-icon@(0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5)
@servicetitan/anvil-icons@(14.5.4, 14.5.5, 14.5.6, 14.5.7, 14.5.8)
@servicetitan/anvil-react@(0.11.3, 0.11.4, 0.11.5, 0.11.6, 0.11.7)
@servicetitan/anvil-themes@(14.5.4, 14.5.5, 14.5.6, 14.5.7, 14.5.8)
@servicetitan/anvil-token@(0.4.1, 0.4.2, 0.4.3, 0.4.4, 0.4.5)
@servicetitan/anvil2@(3.9.1, 3.9.2, 3.9.3, 3.9.4, 3.9.5)
@servicetitan/anvil2-codemods@(0.11.2, 0.11.3, 0.11.4, 0.11.5, 0.11.6)
@servicetitan/anvil2-ext-atlas@(4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6)
@servicetitan/anvil2-ext-charts@(0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8)
@servicetitan/anvil2-ext-common@(0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5)
@servicetitan/anvil2-ext-mwv@(0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9)
@servicetitan/anvil2-illustrations@(1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6)
@servicetitan/anvil2-mcp@(0.0.9, 0.0.10, 0.0.11, 0.0.12, 0.0.13)
@servicetitan/assist-ui@(2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5)
@servicetitan/assist-utils@(1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6)
@servicetitan/carto-charts-core@(0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6)
@servicetitan/carto-charts-react@(0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6)
@servicetitan/carto-charts-rn@(0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6)
@servicetitan/carto-react-kit@(0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8)
@servicetitan/carto-rn-kit@(0.0.10, 0.0.11, 0.0.12, 0.0.13, 0.0.14)
@servicetitan/carto-tokens@(0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5)
@servicetitan/component-usage@(28.5.1, 28.5.2, 28.5.3, 28.5.4, 28.5.5)
@servicetitan/confirm@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/confirm-navigation@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/contentful@(0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7)
@servicetitan/contentful-proxy@(1.1.12, 1.1.13, 1.1.14, 1.1.15, 1.1.16)
@servicetitan/cp-api@(1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5)
@servicetitan/cp-mfe@(1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5)
@servicetitan/cp-mfe-dev@(1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5)
@servicetitan/cp-react-hooks@(1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5)
@servicetitan/cp-ui@(1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5)
@servicetitan/culture@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/data-query@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/datadog-rum@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/datetime-utils@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/design-system@(14.5.4, 14.5.5, 14.5.6, 14.5.7, 14.5.8)
@servicetitan/docs-anvil-uikit-contrib@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/docs-uikit@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/document-title@(2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5)
@servicetitan/dte-pdf-editor@(1.76.1, 1.76.2, 1.76.3, 1.76.4, 1.76.5)
@servicetitan/dte-unlayer@(0.150.1, 0.150.2, 0.150.3, 0.150.4, 0.150.5)
@servicetitan/eh-module-communication@(0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5)
@servicetitan/error-boundary@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/eslint-config@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/eslint-plugin@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/eslint-plugin-decorators-declare@(12.8.15, 12.8.16, 12.8.17, 12.8.18, 12.8.19)
@servicetitan/eslint-plugin-folder-schema@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/eslint-plugin-mobx-6@(12.8.15, 12.8.16, 12.8.17, 12.8.18)
@servicetitan/eslint-plugin-processors-stub@(12.8.15, 12.8.16, 12.8.17, 12.8.18, 12.8.19)
@servicetitan/examples@(1.2.5, 1.2.6, 1.2.7, 1.2.8, 1.2.9)
@servicetitan/feature-spotlight@(3.9.1, 3.9.2, 3.9.3, 3.9.4, 3.9.5)
@servicetitan/folder-lint@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/forge@(0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5)
@servicetitan/form@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/form-state@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/grid@(0.0.63, 0.0.64, 0.0.65, 0.0.66, 0.0.67)
@servicetitan/hammer-icon@(1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5)
@servicetitan/hammer-react@(1.42.2, 1.42.3, 1.42.4, 1.42.5, 1.42.6)
@servicetitan/hammer-token@(3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5)
@servicetitan/hash-browser-router@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/help-center@(1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12)
@servicetitan/html-sketchapp@(4.2.8, 4.2.9, 4.2.10, 4.2.11, 4.2.12)
@servicetitan/install@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/intl@(7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5)
@servicetitan/json-render-react@(0.4.6, 0.4.7, 0.4.8, 0.4.9, 0.4.10)
@servicetitan/kendo-theme@(0.0.27, 0.0.28, 0.0.29, 0.0.30, 0.0.31)
@servicetitan/ko-bridge@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/launchdarkly-service@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/lazy-module@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/ld-type-generator@(0.2.1, 0.2.2, 0.2.3, 0.2.4, 0.2.5)
@servicetitan/line-item-editor@(1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5)
@servicetitan/link-item@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/log-service@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/marketing-direct-mail-components@(20.1.1, 20.1.2, 20.1.3, 20.1.4, 20.1.5)
@servicetitan/marketing-email-components@(20.2.3, 20.2.4, 20.2.5, 20.2.6, 20.2.7)
@servicetitan/marketing-form@(0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6)
@servicetitan/marketing-global-route@(1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5)
@servicetitan/marketing-integration-widgets@(1.0.40, 1.0.41, 1.0.42, 1.0.43, 1.0.44)
@servicetitan/marketing-route@(1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5)
@servicetitan/marketing-ui@(9.3.1, 9.3.2, 9.3.3, 9.3.4, 9.3.5)
@servicetitan/marketing-widgets@(1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5)
@servicetitan/measure-sheet-data@(2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5)
@servicetitan/mfe-quick-actions@(0.5.49, 0.5.50, 0.5.51, 0.5.52, 0.5.53)
@servicetitan/micro-frontend@(0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8)
@servicetitan/microfront@(0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6)
@servicetitan/microfront-auth@(0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9)
@servicetitan/microfront-tests@(0.0.11, 0.0.12, 0.0.13, 0.0.14, 0.0.15)
@servicetitan/microfront-utils@(1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5)
@servicetitan/modularpayments-webfields@(1.0.53, 1.0.54, 1.0.55, 1.0.56, 1.0.57)
@servicetitan/moneyout-api-client@(1.29.1, 1.29.2, 1.29.3, 1.29.4, 1.29.5)
@servicetitan/mpa-components@(2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5)
@servicetitan/navigation@(14.1.1, 14.1.2, 14.1.3, 14.1.4, 14.1.5)
@servicetitan/notifications@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/onboarding-ui@(18.5.1, 18.5.2, 18.5.3, 18.5.4, 18.5.5)
@servicetitan/quick-actions@(1.15.2, 1.15.3, 1.15.4, 1.15.5, 1.15.6)
@servicetitan/react-hooks@(7.7.1, 7.7.2, 7.7.3, 7.7.4, 7.7.5)
@servicetitan/react-ioc@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/responsive@(6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5)
@servicetitan/restrict-imports@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/schema-comparison@(0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7)
@servicetitan/skeleton@(9.2.4, 9.2.5, 9.2.6, 9.2.7, 9.2.8)
@servicetitan/standalone-core-feature-gates@(1.11.4, 1.11.5, 1.11.6, 1.11.7, 1.11.8)
@servicetitan/standalone-feature-flags@(2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6)
@servicetitan/standalone-root@(1.11.3, 1.11.4, 1.11.5, 1.11.6, 1.11.7)
@servicetitan/standalone-tm-api@(1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5)
@servicetitan/standalone-ui@(2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.2.8)
@servicetitan/startup@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/startup-jest@(2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5)
@servicetitan/startup-mfe-compat@(0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5)
@servicetitan/startup-utils@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/stylelint-config@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/suppress-warnings@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/table@(41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5)
@servicetitan/tanstack-query-mobx@(6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5)
@servicetitan/temporal-lite@(3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5)
@servicetitan/testing-library@(6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5)
@servicetitan/thoughtspot-theme@(1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5)
@servicetitan/time-zones@(3.8.1, 3.8.2, 3.8.3, 3.8.4, 3.8.5)
@servicetitan/titan-chat-ui@(7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7)
@servicetitan/titan-chat-ui-anvil2@(9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5)
@servicetitan/titan-chat-ui-common@(9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5)
@servicetitan/titan-chat-ui-cypress@(2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7)
@servicetitan/titan-chatbot-api@(9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5)
@servicetitan/titan-chatbot-client@(2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7)
@servicetitan/titan-chatbot-ui@(7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7)
@servicetitan/titan-chatbot-ui-anvil2@(9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5)
@servicetitan/titan-chatbot-ui-cypress@(9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5)
@servicetitan/tokens@(12.9.1, 12.9.2, 12.9.3, 12.9.4, 12.9.5)
@servicetitan/toolbelt-shared-registry@(1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5)
@servicetitan/uikit-docs@(22.11.1, 22.11.2, 22.11.3, 22.11.4, 22.11.5)
@servicetitan/unit-tests@(0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6)
@servicetitan/va-mfe-loader@(1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5)
@servicetitan/web-components@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5)
@servicetitan/widget-platform@(5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5)
@servicetitan/widget-platform-monolith@(5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5)
@thiennq/docs-viewer@1.6.2
@workbench-stack/core@3.9.8
babel-plugin-linaria-css-to-undefined@(0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 0.3.7, 0.3.8, 0.3.9)
cache-manager@7.2.10
cacheable@2.5.1
cacheable-request@13.0.20
conv-context-next@(1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8)
ecto@5.0.1
editable-contracts@(0.0.12, 0.0.13, 0.0.14, 0.0.15, 0.0.16, 0.0.17, 0.0.18, 0.0.19, 0.0.20, 0.0.21, 0.0.22, 0.0.23, 0.0.24, 0.0.25)
eslint-plugin-folder-schema@(1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19)
example-js-project@(1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.8, 1.0.9)
file-entry-cache@11.1.6
flat-cache@6.1.24
folder-lint@(1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19)
frontend-orb@(4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 4.4.7, 4.4.8, 4.4.9, 4.4.10)
hamus.js@0.4.1
http-metrics-middleware@2.2.2
keyv@6.0.0
native-frontend-orb@(1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.10, 1.1.11)
picasso-plugin-hammer@2.11.6
picasso-plugin-q@2.11.6
picasso.js@2.11.6
pob-test-package-in-monorepo@(5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9)
pob-test-typescript-package-in-monorepo@(4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.2.6, 4.2.7, 4.2.8, 4.2.9, 4.2.10)
qlik-chart-modules@1.1.1
qlik-modifiers@0.10.1
qlik-object-conversion@0.17.2
rwc-client@(0.29.10, 0.29.11, 0.29.12, 0.29.13, 0.29.14, 0.29.15, 0.29.16, 0.29.17)
server-hemera-mongo@0.0.12
sn-listbox@0.3.3
tslint-folder-schema@(1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19)
verdaccio-okta-oauth@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5, 38.1.6, 38.1.7, 38.1.8, 38.1.9, 38.1.10, 38.1.11, 38.1.12, 38.1.13, 38.1.14)
verdaccio-tarball-local-storage@(38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5, 38.1.6, 38.1.7, 38.1.8, 38.1.9, 38.1.10, 38.1.11, 38.1.12, 38.1.13, 38.1.14)
workbench-browser-server@0.0.2
