⚠️ BETA — IOC data under active verification 2026-05-25, do not rely on matches for production. Supply chain attack IOC catalog. List active campaigns: npm, PyPI, Composer. Shai-Hulud, TanStack, Laravel-Lang. For coding agents pre-install audit.