New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details → →
@webiny/utils
Advanced tools
@webiny/utils - npm Package Compare versions
+5
-5
| { | ||
| "name": "@webiny/utils", | ||
| "version": "6.1.0-beta.1", | ||
| "version": "6.1.0-beta.2", | ||
| "type": "module", | ||
@@ -20,4 +20,4 @@ "main": "index.js", | ||
| "@noble/hashes": "2.0.1", | ||
| "@webiny/error": "6.1.0-beta.1", | ||
| "@webiny/plugins": "6.1.0-beta.1", | ||
| "@webiny/error": "6.1.0-beta.2", | ||
| "@webiny/plugins": "6.1.0-beta.2", | ||
| "bson-objectid": "2.0.4", | ||
@@ -31,3 +31,3 @@ "jsonpack": "1.1.5", | ||
| "devDependencies": { | ||
| "@webiny/build-tools": "6.1.0-beta.1", | ||
| "@webiny/build-tools": "6.1.0-beta.2", | ||
| "rimraf": "6.1.3", | ||
@@ -44,3 +44,3 @@ "typescript": "5.9.3", | ||
| }, | ||
| "gitHead": "3c1293ba17a14f239fb1cbf5d80cd66846849309" | ||
| "gitHead": "7174b414a55fc1c3f4cf38abab69dba5109e7765" | ||
| } |
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Fixed alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
No metric changes
Dependency changes
+ Added
@webiny/error@6.1.0-beta.2(transitive)+ Added
@webiny/plugins@6.1.0-beta.2(transitive)- Removed
@webiny/error@6.1.0-beta.1(transitive)- Removed
@webiny/plugins@6.1.0-beta.1(transitive)Updated
@webiny/error@6.1.0-beta.2Updated
@webiny/plugins@6.1.0-beta.2