This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
🚨 10 malicious OpenAPI React Query Codegen versions were published to npm in a Mini Shai-Hulud attack through a comment-triggered workflow. All with valid provenance.
Anyone who installed an affected version should treat the environment as compromised.
https://socket.dev/blog/openapi-react-query-codegen-npm-compromise
2026-08-28T21:18:36.571Z