See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
@cognite/sdk-core vulnerabilities
A core library used by Cognite Javascript SDKs, published as `@cognite/sdk-core`. It is used in the official stable and beta SDK and can also be used to create custom SDKs and alpha builds.