
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@yarnpkg/plugin-git
Advanced tools
@yarnpkg/plugin-gitThis plugin adds support for cloning packages from Git repositories.
This plugin is included by default in Yarn.
FAQs
Unknown package
The npm package @yarnpkg/plugin-git receives a total of 71,211 weekly downloads. As such, @yarnpkg/plugin-git popularity was classified as popular.
We found that @yarnpkg/plugin-git demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.