UNDELETE

Summary from the TLDR InfoSec newsletter

This tool recovers deleted NPM packages by querying five registries (npmjs.org, cnpmjs.org, npmmirror.com, huaweicloud.com, and tencent.com) to download 1-20 recent versions with metadata, including usernames, emails, and maintainer information, utilizing auto-retries and security filtering. Security researchers can retrieve discontinued malicious packages for malware analysis and threat intelligence. Features include custom output, silent mode with JSON, and no external dependencies, making deployment easy. Teams use this for post-incident recovery, building malware collections, and investigating suspicious packages that have been quickly removed from NPM.