@art-ws/config-ts
v2.0.10
Published
Versions 2.0.7 and 2.0.8 of this package were published with malicious code on 15 September 2025, when the npm account that publishes it was compromised in the Shai-Hulud supply-chain campaign. The registry removed them from npm; they cannot be installed.
Readme
@art-ws/config-ts
Security notice
Versions 2.0.7 and 2.0.8 of this package were published with malicious code on 15 September 2025, when the npm account that publishes it was compromised in the Shai-Hulud supply-chain campaign. The registry removed them from npm; they cannot be installed.
Full write-up of the incident — every affected package and version, the timeline, and how to check your own project: https://art-ws.org/security/2025-09-shai-hulud/
