See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
asynchron vulnerabilities
Small library that adds wait, async pattern to promises. Internally it adapts Q promises but have very diffrent API outside. Created mainly for simplifying code within Swarm projects