ExploitedPHP2Shell is now on CISA KEV

obsidian-tc@1.3.1

Skip this version — install 1.33.1 instead.

Followed by 1.3.2 within 3 h, faster than this project's usual cadence — likely a hotfix.

Why this verdict

  • Followed by 1.3.2 within 3 h, faster than this project's usual cadence — likely a hotfix.Evidence
  • 1 known advisory (worst: high), fixed in 1.31.4.Evidence
  • License changed: Apache-2.0 → AGPL-3.0-only.Evidence

Confidence 100% · algorithm v1 · computed 2026-10-27. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
1 known
License
AGPL-3.0-onlychanged
Install scripts
None
Build provenance
Signed provenance
Weekly downloads
37
  • GHSA-r3g7-r4hr-m258obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

Check the official release notes below for behaviour changes before merging.

Release notes

Read the package page on npm for this version’s features and fixes.

Deprecations and deadlines

The maintainer has not deprecated this version on npm.