Malicious code in amazon-cache (npm)

Source: ossf-package-analysis 47afadf6d8e5ca0f2cb5ebb9ee561ce12c13b4faa4ed23a68e437d86a3a911f3 The OpenSSF Package Analysis project identified 'amazon-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-internal (npm)

Source: ossf-package-analysis 37b343f6247424c351b1652a4790cc2f86d3901894612c95b676ed5bf3f96300 The OpenSSF Package Analysis project identified 'amazon-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-db (npm)

Source: ossf-package-analysis b2f3fdc024f82b11d080d27e18dfe206e477583ec84c8f2268b9e275c9bb36d7 The OpenSSF Package Analysis project identified 'amazon-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...

Malicious code in amazon-admin (npm)

Source: ossf-package-analysis d8c0584799a75463d5c130aa96af2f9e2528a3059c901d9172db6f1aa601eadd The OpenSSF Package Analysis project identified 'amazon-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-auth (npm)

Source: ossf-package-analysis 972d775baca466f5fa482d2629c80172c236ea0f349612f1e9e9aa9f00919807 The OpenSSF Package Analysis project identified 'amazon-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-gateway (npm)

Source: ossf-package-analysis f8c3ed9194a70a080c9814645d91c46cf2195692168d2efa5e08e5078a853d91 The OpenSSF Package Analysis project identified 'amazon-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-chime-sdk-js-exp (npm)

Source: ossf-package-analysis 41b8665f77f2bb83789c04cdd6973e2525d3af8609a0e4fc6f41e7b460eb1b51 The OpenSSF Package Analysis project identified 'amazon-chime-sdk-js-exp' @ 10.10.100 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in amazon-cloud (npm)

Source: ossf-package-analysis 4b71318a5323c17de18f5573bc2c87a70f80ec6de2577c55c243993d76da1f51 The OpenSSF Package Analysis project identified 'amazon-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-logger (npm)

Source: ossf-package-analysis 00fffe8a9d54ad61ee1ae7e0d4091db1d8f442df37de1763e2a81e4647fc0dba The OpenSSF Package Analysis project identified 'amazon-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

Malicious code in amazon-oauth (npm)

Source: ossf-package-analysis e6c3c7c427f25937801f54534b488f10721cf11e43e122f0f00a47350ba80c2c The OpenSSF Package Analysis project identified 'amazon-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-checkout (npm)

Source: ossf-package-analysis 4728fc0ef630dde9616340e6f9a3571e2bb5e75e034fac804e6ca9b0030a7846 The OpenSSF Package Analysis project identified 'amazon-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-api-client (npm)

Source: ossf-package-analysis 6d636dd276d6d15fd9f9e581c52e6eeb5544ee37a69159d195dfd60454c8a42f The OpenSSF Package Analysis project identified 'amazon-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-jira (npm)

Source: ossf-package-analysis 6297a38aebdfe8801c87db33066658d250b10b53dd9eddca04a6bfc2470bb3d9 The OpenSSF Package Analysis project identified 'amazon-jira' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-analytics (npm)

Source: ossf-package-analysis 12894a12a5148065c49468c741a4ba9eedea8c2a1c90262be5e3263553730582 The OpenSSF Package Analysis project identified 'amazon-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-database (npm)

Source: ossf-package-analysis 2c88ccb61fbaac42f853b7abf095d81a3ebf30c8b8ae2aefda753f39769c0422 The OpenSSF Package Analysis project identified 'amazon-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amazon-model (npm)

Source: ossf-package-analysis ca95e83b37fb0ea358d6155d8158d873558f75026d3e1b8304456522fafc7755 The OpenSSF Package Analysis project identified 'amazon-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in amazon-event (npm)

Source: ossf-package-analysis 6f6b905daf64e276ca8caef8989a1d7964855db0456a4512fb566fbecda0c79d The OpenSSF Package Analysis project identified 'amazon-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

PT-2026-84881

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

CVE-2026-83551

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...