Robuta

https://advisories.gitlab.com/npm/@accordproject/concerto-analysis/GMS-2025-2/ @accordproject/concerto-analysis contains malware after npm account takeover | GitLab Advisory... GMS-2025-2 @accordproject/concerto-analysis contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0... account takeoverconcertoanalysiscontainsmalware https://advisories.gitlab.com/npm/@accordproject/concerto-linter/GMS-2025-3/ @accordproject/concerto-linter contains malware after npm account takeover | GitLab Advisory... GMS-2025-3 @accordproject/concerto-linter contains malware after npm account takeover: On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0... account takeoverconcertolintercontainsmalware