registry / Install hook abuse / eve
eve
Filesystem-first framework for durable backend AI agents that run anywhere.
This report shows the evidence for eve@0.51.0. 1 of 103 known versions is blocked or flagged. The newest version, 0.83.0, is allowed. See all versions.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package creates an unnecessary, aliased runtime dependency on an older release of itself, producing an opaque nested supply-chain path during installation. This is malicious install-hook abuse under the lifecycle self-dependency policy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing eve@0.51.0 with npm or another package manager.
Impact
A separate older eve release is fetched and its lifecycle behavior can execute outside the reviewed release's visible code path.
Mechanism
Aliased runtime self-dependency on an older eve release.
Attack narrative
The manifest declares historical-eve-0-30-8 as npm:eve@0.30.8. Package managers install this older eve release automatically while installing 0.51.0. Searches of the reviewed compiled source found no reference to that alias, so it is an unnecessary opaque nested-release chain rather than a visible compatibility feature. The nested release may carry its own lifecycle behavior and escapes review of the requested package source.
AI rationale
The package creates an unnecessary, aliased runtime dependency on an older release of itself, producing an opaque nested supply-chain path during installation. This is malicious install-hook abuse under the lifecycle self-dependency policy.
Evidence
package.json
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- The runtime dependencies install eve version 0.30.8 again under a different package name.
- No compiled source references the aliased historical package, so the nested installation has no visible product use.
- The alias forces npm to resolve and install a separate older release during dependency installation.
Evidence against
- The manifest has no preinstall, install, or postinstall hook.
- The reviewed package code contains no confirmed credential-harvesting or exfiltration path.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationProtestwareUrlStrings
Oversized source lightweight scan
dist/src/compiled/@photon-ai/chat-adapter-imessage/index.js2.17 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsMinified
dist/src/compiled/shadcn-registry/index.js9.31 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsMinifiedUrlStringsui.shadcn.com
Source & flagged code
17 flagged · loading sourcedist/src/compiled/@vercel/blob/index.jsView file
28patternName = private_key_rsa
severity = critical
line = 28
Critical
Critical Secret
Package contains a critical-looking secret pattern.
dist/src/compiled/@vercel/blob/index.jsView on unpkg · L28•matchType = previous_version_dangerous_delta
matchedPackage = eve@0.51.1
matchedIdentity = npm:ZXZl:0.51.1
similarity = 0.908
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/src/compiled/@vercel/blob/index.jsView on unpkg28patternName = private_key_rsa
severity = critical
line = 28
Critical
Secret Pattern
RSA private key in dist/src/compiled/@vercel/blob/index.js
dist/src/compiled/@vercel/blob/index.jsView on unpkg · L281Trigger-reachable command-output exfiltration chain: manifest.exports -> [redacted].d.ts -> [redacted]-blob.js -> dist/src/compiled/@vercel/blob/index.js
L1: import{createRequire as e}from"node:module";import{Readable as t}from"stream";var n=Object.create,r=Object.defineProperty,i=Object.getOwnPropertyDescriptor,a=Object.getOwnPropertyN...
L2: `)}async function m(e){try{if(!(await(0,u.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),P=c(((e,t)=>{let n=d(`path`),r=w(),i=e=>{e=...
High
Trigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/src/compiled/@vercel/blob/index.jsView on unpkg · L1bin/eve.jsView file
2L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
High
2Cross-file remote execution chain: bin/eve.js spawns dist/src/compiled/@agentclientprotocol/sdk/index.js; helper contains network access plus dynamic code execution.
L2:
L3: import { spawn } from "node:child_process";
L4: import { access, readdir, realpath, stat } from "node:fs/promises";
...
L9: const require = createRequire(import.meta.url);
L10: const packageJson = require("../package.json");
L11: const packageNodeEngine = packageJson.engines?.node;
...
L354: }
L355: process.exitCode = 1;
L356: } finally {
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
bin/eve.jsView on unpkg · L28L9: const require = createRequire(import.meta.url);
L10: const packageJson = require("../package.json");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/eve.jsView on unpkg · L8dist/src/compiled/gray-matter/index.jsView file
43return `+str.trim()+`;
L44: }());`),eval(str)||{}}catch(e){if(wrap!==!1&&/(unexpected|identifier)/i.test(e.message))return parse(str,options,!1);throw SyntaxError(e)}},stringify:function(){throw Error(`string...
L45: `?e:e+`
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/src/compiled/gray-matter/index.jsView on unpkg · L43dist/src/compiled/@workflow/core/runtime.jsView file
1import{a as e,i as t,t as n}from"../../_chunks/workflow/rolldown-runtime-8V8biNmG.js";import{t as r}from"../../_chunks/workflow/global-singleton-BNinwFrL.js";import{$ as i,$t as a,...
L2: `).map(e=>{let n=e.match(/^\s*at\s+(?:(.+?)\s+\()?(.+?):(\d+):(\d+)\)?$/);if(!n)return e;let[,i,a,o,s]=n;if(!a.includes(t))return e;let c=parseInt(o,10),l=parseInt(s,10),u=no(r,{li...
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
dist/src/compiled/@workflow/core/runtime.jsView on unpkg · L1dist/src/internal/authored-module-loader.jsView file
3`).filter(e=>!e.startsWith(`//#region `)&&e!==`//#endregion`).join(`
L4: `)}async function loadBundledAuthoredModule(t,n){let i=await bundleAuthoredModuleCode(t,n),a=normalizeExternalDependencies(n.externalDependencies),o=createHash(`sha1`).update(t).up...
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/src/internal/authored-module-loader.jsView on unpkg · L3dist/src/compiled/@ai-sdk/code-mode/index.jsView file
649\`)}catch(i){throw B(k(t,i))}let s=t.newObject(),o=[["log",de(t,"console.log","stdout",r,n)],["info",de(t,"console.info","stdout",r,n)],["debug",de(t,"console.debug","stdout",r,n)]...
L650: \`,l=Buffer.byteLength(u);return l>n.remainingBytes?(n.remainingBytes=0,t.undefined):(n.remainingBytes-=l,it(r==="stderr"?2:1,u),t.undefined)})}function er(t,e,r,n){let s=t.newNumb...
L651: ${e}
...
L658: }`:s}function Ei(e,t){let n=e.items;if(Array.isArray(n))return`[${n.map(e=>$(e)?Z(e,Q(t)):`unknown`).join(`, `)}]`;if($(n)){let e=Z(n,Q(t));return Pi(e)||e.includes(`
L659: `)?`Array<${e}>`:`${e}[]`}return`unknown[]`}function Di(e,t){return Oi(e,{root:t,seenRefs:new Set,depth:0})}function Oi(e,t){if(t.depth>8)return null;if(e.default!==void 0)return e...
L660: `))return e;let n=` `.repeat(t);retu
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src/compiled/@ai-sdk/code-mode/index.jsView on unpkg · L649dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.jsView file
1import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),b=t(((t,n)=>{let r=e(`path`),i=u(),a=e=>{e=...
L4: `);return _?(a.originalMessage=a.message,a.message=y):a=Error(y),a.shortMessage=v,a.command=c,a.escapedCommand=l,a.exitCode=s,a.signal=o,a.signalDescription=m,a.stdout=e,a.stderr=t...
L5: `)}})),q=t((e=>{var t=e&&e.__createBinding||
High
Host Fingerprint Exfiltration
Source collects local host identity data and sends it to an external endpoint.
dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.jsView on unpkg · L11import{i as e,t}from"./rolldown-runtime-8V8biNmG.js";import{t as n}from"./signal-exit-o3IPQwwv.js";var r=t(((e,t)=>{var n=Object.defineProperty,r=Object.getOwnPropertyDescriptor,i=...
L2: `)}async function m(e){try{if(!(await(0,d.stat)(e)).isDirectory())throw Error(`not a directory`)}catch{throw new f({code:`VERCEL_CLI_INVALID_CWD`,message:`Working directory ${JSON....
L3: `:10,n=typeof e==`string`?`\r`:13;return e[e.length-1]===t&&(e=e.slice(0,e.length-1)),e[e.length-1]===n&&(e=e.slice(0,e.length-1)),e}})),b=t(((t,n)=>{let r=e(`path`),i=u(),a=e=>{e=...
L4: `);return _?(a.originalMessage=a.message,a.message=y):a=Error(y),a.shortMessage=v,a.command=c,a.escapedCommand=l,a.exitCode=s,a.signal=o,a.signalDescription=m,a.stdout=e,a.stderr=t...
L5: `)}})),q=t((e=>{var t=e&&e.__createBinding||
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/src/compiled/_chunks/workflow/token-util-BneBe0g5.jsView on unpkg · L1dist/src/compiled/@vercel/sandbox/index.jsView file
1import{o as e}from"../../_chunks/node/rolldown-runtime-DaDcL9Zw.js";import{n as t,t as n}from"../../_chunks/node/dist-DsNhwdzf.js";import{n as r}from"../../_chunks/node/retry-qwFNG...
L2: `):t;let n=t.replace(/^/gm,`${mt} `);console.error(pt[e](n))}function ht(e){return L.default.italic(L.default.dim("`")+e+L.default.dim("`"))}var gt=e(r(),1);async function _t(){ret...
L3: `));if(e.teamId&&e.projectId)return{token:o.token,teamId:e.teamId,projectId:e.projectId};let s=await a({teamId:e.teamId,token:o.token});return s.created&&R(`info`,`Created default ...
...
L7: `).filter(Boolean).map(t=>Ht(t,e))}let n=await this.sandbox.runCommand(`ls`,[`-1`,e],{signal:t?.signal});if(n.exitCode!==0){let t=await n.stderr();throw t.includes(`No such file or...
L8: `).filter(Boolean)}async stat(e,t){"use
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/src/compiled/@vercel/sandbox/index.jsView on unpkg · L1dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView file
1var e=`vercel.ai.error`,t=Symbol.for(e),n,r,i=class i extends (r=Error,n=t,r){constructor({name:e,message:t,cause:r}){super(t),this[n]=!0,this.name=e,this.cause=r}static isInstance...
L2: Error message: ${g(t)}`,cause:t}),this[Se]=!0,this.text=e}static isInstance(e){return i.hasMarker(e,be)}},Te=`AI_LoadAPIKeyError`,Ee=`vercel.ai.error.${Te}`,De=Symbol.for(Ee),Oe,ke...
L3: Error message: ${g(t)}`,cause:t}),this[Qe]=!0,this.value=e,this.context=n}static isInstance(e){return i.hasMarker(e,Xe)}static wrap({value:t,cause:n,context:r}){return e.isInstance...
L4: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ...
L5: `)}\n};`)(...Object.values(this.closed))}};c
High
Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.jsView on unpkg · L1dist/src/compiled/shadcn-registry/index.jsView file
•path = dist/src/compiled/shadcn-registry/index.js
kind = oversized_source_file
sizeBytes = 9760341
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/src/compiled/shadcn-registry/index.jsView on unpkgdist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView file
•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 7
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/src/compiled/@photon-ai/chat-adapter-imessage/index.jsView on unpkgFindings
3 Critical10 High7 Medium6 Low
CriticalCritical Secretdist/src/compiled/@vercel/blob/index.js
CriticalPrevious Version Dangerous Deltadist/src/compiled/@vercel/blob/index.js
CriticalSecret Patterndist/src/compiled/@vercel/blob/index.js
HighChild Processbin/eve.js
HighShell
HighSame File Env Network Executiondist/src/compiled/@ai-sdk/code-mode/index.js
HighHost Fingerprint Exfiltrationdist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js
HighCommand Output Exfiltrationdist/src/compiled/_chunks/workflow/token-util-BneBe0g5.js
HighSandbox Evasion Gated Capabilitydist/src/compiled/@vercel/sandbox/index.js
HighCloud Metadata Accessdist/src/compiled/_chunks/workflow/dist-Cz-ffHKC.js
HighCross File Remote Execution Contextbin/eve.js
HighTrigger Reachable Command Output Exfiltrationdist/src/compiled/@vercel/blob/index.js
HighSemantic Analysis Limiteddist/src/compiled/@photon-ai/chat-adapter-imessage/index.js
MediumDynamic Requirebin/eve.js
MediumUnsafe Vm Contextdist/src/compiled/@workflow/core/runtime.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumOversized Source Filedist/src/compiled/shadcn-registry/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/src/compiled/gray-matter/index.js
LowWeak Cryptodist/src/internal/authored-module-loader.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to eve@0.51.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing eve@0.51.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
103 known versions0.83.0latestClean—AllowPublishedOct 23, 2026, 12:37 AM0.82.0Clean—AllowPublishedOct 21, 2026, 6:18 PM0.81.1Clean—AllowPublishedOct 20, 2026, 12:30 AM0.80.1Clean—AllowPublishedOct 16, 2026, 2:34 PM0.80.0Clean—AllowPublishedOct 15, 2026, 8:52 PM0.79.2Clean—AllowPublishedOct 15, 2026, 2:15 PM0.79.1Clean—AllowPublishedOct 14, 2026, 7:43 PM0.79.0Clean—AllowPublishedOct 13, 2026, 6:45 PM0.78.0Clean—AllowPublishedOct 13, 2026, 1:52 AM0.77.0Clean—AllowPublishedOct 11, 2026, 8:26 PM0.76.3Clean—AllowPublishedOct 10, 2026, 6:29 PM0.76.2Clean—AllowPublishedOct 10, 2026, 4:31 PM0.76.0Clean—AllowPublishedOct 9, 2026, 5:28 PM0.75.1Clean—AllowPublishedOct 8, 2026, 11:42 PM0.74.0Clean—AllowPublishedOct 8, 2026, 3:34 AM0.73.0Clean—AllowPublishedOct 7, 2026, 6:27 PM0.72.0Clean—AllowPublishedOct 7, 2026, 1:35 AM0.70.2Clean—AllowPublishedOct 2, 2026, 11:46 PM0.69.0Clean—AllowPublishedOct 1, 2026, 1:38 AM0.68.0Clean—AllowPublishedSep 28, 2026, 10:58 PM0.67.2Clean—AllowPublishedSep 27, 2026, 3:17 PM0.67.1Clean—AllowPublishedSep 26, 2026, 4:32 PM0.67.0Clean—AllowPublishedSep 26, 2026, 4:46 AM0.66.3Clean—AllowPublishedSep 24, 2026, 8:52 PM0.66.0Clean—AllowPublishedSep 23, 2026, 7:55 PM0.64.1Clean—AllowPublishedSep 22, 2026, 11:05 PM0.64.0Clean—AllowPublishedSep 22, 2026, 7:42 PM0.62.0Scan Failed—AllowUnder ReviewSep 18, 2026, 11:47 PM0.61.0Scan Failed—AllowUnder ReviewSep 18, 2026, 5:49 PM0.60.1Scan Failed—AllowUnder ReviewSep 18, 2026, 2:26 PM0.59.1Scan Failed—AllowUnder ReviewSep 17, 2026, 9:14 PM0.59.0SuspiciousAgent extension lifecycle riskWarnPublishedSep 17, 2026, 7:56 PM0.58.1Suspicious—WarnPublishedSep 17, 2026, 3:39 AM0.55.0SuspiciousAI-agent capability abuseWarnPublishedSep 15, 2026, 12:02 AM0.54.4SuspiciousAgent extension lifecycle riskWarnPublishedSep 14, 2026, 1:36 PM0.54.3SuspiciousStaged Payload CarrierWarnPublishedSep 11, 2026, 9:47 PM0.54.2SuspiciousAI-agent capability abuseWarnPublishedSep 11, 2026, 6:59 PM0.54.0Suspicious—WarnPublishedSep 11, 2026, 4:01 PM0.53.1SuspiciousAgent extension lifecycle riskWarnPublishedSep 10, 2026, 8:02 PM0.52.5SuspiciousAI-agent capability abuseWarnPublishedSep 10, 2026, 2:14 AM0.52.4Suspicious—WarnPublishedSep 9, 2026, 3:24 PM0.52.3Suspicious—WarnPublishedSep 8, 2026, 9:35 PM0.52.2Suspicious—WarnPublishedSep 6, 2026, 12:16 PM0.52.1SuspiciousAI-agent capability abuseWarnPublishedSep 4, 2026, 10:46 PM0.52.0SuspiciousAgent extension lifecycle riskWarnPublishedSep 4, 2026, 7:01 PM0.51.1SuspiciousAgent extension lifecycle riskWarnPublishedSep 4, 2026, 2:30 AM0.51.0shownMaliciousInstall Hook AbuseBlockPublishedSep 3, 2026, 3:20 PM0.48.0Scan Failed—AllowUnder ReviewSep 1, 2026, 8:15 PM0.47.7Clean—AllowPublishedSep 1, 2026, 2:55 PM0.47.6SuspiciousStaged Payload CarrierWarnPublishedAug 31, 2026, 7:18 PM0.47.5SuspiciousInstall Hook AbuseWarnPublishedAug 31, 2026, 6:27 PM0.47.3Suspicious—WarnPublishedAug 28, 2026, 7:41 PM0.47.2Suspicious—WarnPublishedAug 27, 2026, 11:10 PM0.47.1Clean—AllowPublishedAug 27, 2026, 10:23 PM0.47.0Clean—AllowPublishedAug 27, 2026, 9:25 PM0.46.1SuspiciousDependency ConfusionWarnPublishedAug 27, 2026, 4:17 PM0.46.0SuspiciousCredential ExfiltrationWarnPublishedAug 27, 2026, 2:06 PM0.45.2Scan Failed—AllowUnder ReviewAug 26, 2026, 10:07 PM0.45.1Suspicious—WarnPublishedAug 26, 2026, 6:50 PM0.45.0Suspicious—WarnPublishedAug 26, 2026, 2:36 AM0.44.4Manual Review—AllowUnder ReviewAug 24, 2026, 10:34 PM0.44.1Clean—AllowPublishedAug 22, 2026, 5:50 PM0.44.0Manual Review—AllowUnder ReviewAug 21, 2026, 4:07 PM0.43.0Manual Review—AllowUnder ReviewAug 21, 2026, 12:03 PM0.42.0Clean—AllowPublishedAug 20, 2026, 9:06 PM0.41.0Manual Review—AllowUnder ReviewAug 20, 2026, 8:33 PM0.40.0Clean—AllowPublishedAug 20, 2026, 4:55 AM0.39.3Clean—AllowPublishedAug 19, 2026, 10:41 PM0.39.2Clean—AllowPublishedAug 19, 2026, 6:12 PM0.39.1Clean—AllowPublishedAug 19, 2026, 4:30 AM0.39.0Clean—AllowPublishedAug 17, 2026, 9:49 PM0.38.2Clean—AllowPublishedAug 14, 2026, 8:15 PM0.38.1Clean—AllowPublishedAug 14, 2026, 5:28 PM0.37.1Clean—AllowPublishedAug 14, 2026, 4:57 AM0.37.0SuspiciousAI-agent capability abuseWarnPublishedAug 13, 2026, 9:04 PM0.34.0Clean—AllowPublishedAug 12, 2026, 10:57 PM0.33.3Clean—AllowPublishedAug 12, 2026, 3:58 PM0.33.2Clean—AllowPublishedAug 12, 2026, 4:37 AM0.33.1Clean—AllowPublishedAug 12, 2026, 4:03 AM0.33.0Clean—AllowPublishedAug 11, 2026, 7:55 PM0.31.3Clean—AllowPublishedAug 7, 2026, 7:34 PM0.31.2Clean—AllowPublishedAug 7, 2026, 4:32 PM0.31.1Clean—AllowPublishedAug 7, 2026, 12:50 PM0.31.0Clean—AllowPublishedAug 6, 2026, 1:40 PM0.30.8Clean—AllowPublishedAug 5, 2026, 8:15 PM0.30.7Clean—AllowPublishedAug 5, 2026, 5:29 PM0.30.6Clean—AllowPublishedAug 4, 2026, 11:01 PM0.30.3Clean—AllowPublishedAug 4, 2026, 8:44 PM0.29.4Clean—AllowPublishedJul 31, 2026, 9:16 PM0.27.12Clean—AllowPublishedJul 29, 2026, 1:47 AM0.26.1Clean—AllowPublishedJul 20, 2026, 10:46 PM0.25.2SuspiciousAI-agent capability abuseWarnPublishedJul 18, 2026, 8:07 PM0.25.1Clean—AllowPublishedJul 17, 2026, 7:50 PM0.25.0Clean—AllowPublishedJul 17, 2026, 7:02 PM0.24.6Clean—AllowPublishedJul 16, 2026, 7:52 PM0.24.1Clean—AllowPublishedJul 14, 2026, 7:24 PM0.22.6Clean—AllowPublishedJul 12, 2026, 11:17 PM0.22.5Clean—AllowPublishedJul 10, 2026, 11:03 PM0.22.3Clean—AllowPublishedJul 9, 2026, 5:51 PM0.20.0Clean—AllowPublishedJul 5, 2026, 9:14 PM
Showing the 100 most recent of 103 known versions.