See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
tplink-cloud-api vulnerabilities
Remotely control TP-Link smartplugs (HS100, HS110, HS300) and smartbulbs (LB100, LB110, LB120, LB130) using their cloud web service (no need to be on the same wifi/lan)