MAL-2025-190860 Malicious code in test-foundry-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961bd7169c780d2201b29f4ada6a92f1c9d6eb26c8443c0365a7ea218daa7c8 The package test-foundry-app was found to contain malicious code. Source: ghsa-malware 9b0d08ebcb8c6a236f7c4c5785ac4f1ec1b4e2ede40366d6fc439473f946b3...

Malicious code in manual-billing-system-miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbe247429665dfb3140f405fe662a2c53590e8be9cfeca89a868c826a4fe04f The package manual-billing-system-miniapp-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/css-to-react-native-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb30e7704436db9e7ac671839931de450cdcde7408b8c151337c6958433836 The package @actbase/css-to-react-native-transform was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473280de7d29dd017bfa50f0826a0aa810d204a6949fe49d6753ff28ff61d505 The package @ensdomains/vite-plugin-i18next-loader was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190734 Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f30b72e834f89b59bb7ae3b7ce2b224cfe0619ce1e01190b940be31df3a309 The package @ensdomains/hardhat-toolbox-viem-extended was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/react-native-fast-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7879bec5ae80ecf74326a88c3b01895fe758fa9ddd7e9375e187588383eac0ee The package @actbase/react-native-fast-image was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190709 Malicious code in @actbase/react-native-fast-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7879bec5ae80ecf74326a88c3b01895fe758fa9ddd7e9375e187588383eac0ee The package @actbase/react-native-fast-image was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190720 Malicious code in @asyncapi/python-paho-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7e91afb25619c373d083857f06f65945216536aa6308326de63dd33458f72c The package @asyncapi/python-paho-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/go-watermill-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88957e3f78294013ec0e22167aec58b8de4dcc65099728725b884c54b6afa328 The package @asyncapi/go-watermill-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/react-native-less-transformer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f669b015d3df7c500b192e927f2890c45ad45dafa608100da2146dca598efa The package @actbase/react-native-less-transformer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190717 Malicious code in @asyncapi/java-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686b2e4c1fe342d1169679b52ef96ae90aebf27fe6b9d3c84f0f9d252779ae15 The package @asyncapi/java-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in medusa-plugin-product-reviews-kvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d400830b8f3bd9546ee8f7f68bfb8028db23280c0f6a1c4f494e4eebf65df6f The package medusa-plugin-product-reviews-kvy was found to contain malicious code. Source: ghsa-malware...

Malicious code in devstart-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f231d9b0651ac7f2fb06d9936228b85a858023ac4f8b505f6bcf63ac5d661a5 The package devstart-cli was found to contain malicious code. Source: ghsa-malware 54539cce13f7aae0398b444bd30638c4e74ef9546c180e0bfb778aa00be08a30 A...

MAL-2025-190768 Malicious code in devstart-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f231d9b0651ac7f2fb06d9936228b85a858023ac4f8b505f6bcf63ac5d661a5 The package devstart-cli was found to contain malicious code. Source: ghsa-malware 54539cce13f7aae0398b444bd30638c4e74ef9546c180e0bfb778aa00be08a30 A...

Malicious code in dotnet-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b8736e74e763b930253cc92ff8ee4e0b0c323b712ea201cd40c8590f618b72 The package dotnet-template was found to contain malicious code. Source: ghsa-malware 01d263352d7df50818b3c0bfb8c2c2b4c30e78dcf1feadeb4b808c2636b9c6a...

Malicious code in capacitor-plugin-scgssigninwithgoogle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b87f31a2266c9633975e61214361882324c01060c614e04b15ac2e3a570fe6f The package capacitor-plugin-scgssigninwithgoogle was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190765 Malicious code in capacitor-plugin-scgssigninwithgoogle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b87f31a2266c9633975e61214361882324c01060c614e04b15ac2e3a570fe6f The package capacitor-plugin-scgssigninwithgoogle was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190766 Malicious code in capacitor-purchase-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef54df7bce3add5d55de2f91510b75ffc757c47626010c4f44b59ef8f08242c The package capacitor-purchase-history was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190778 Malicious code in posthog-plugin-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411e53a1772704343ddb3da6957e8e0ee4e8167ec93030bf27e2247081fddc61 The package posthog-plugin-hello-world was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190715 Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ee33a69d9005442fb0347dfb87c303e2acd8cd146d8a85d0cecdc90f94bc3 The package @asyncapi/java-spring-cloud-stream-template was found to contain malicious code. Source: ghsa-malware...