See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
archetypes-rules vulnerabilities
Move conditional logic out of source code and database triggers and into a reusable package, where explicit rules can be independently defined and managed.