MAL-2025-191055 Malicious code in @thedelta/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf18ec0224183e37e3d7ce155ce74e57988e6cdf5c817d06f892ad4b22a7546 The package @thedelta/eslint-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191110 Malicious code in inmaa-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a71a1334fb3a18076752ed1d28b6fa7cc43dc4f4b612d102624e00dcdf53cb The package inmaa-map was found to contain malicious code. Source: ghsa-malware 56eac0e53cd10844280484abbd6456539bce6cd1e970a33a3707d49612ac8a88 Any...

Malicious code in @pruthvi21/use-debounce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd8d11cd0a3abe19ac13cfc1b3bf6a4f1388ac2c6a404090a1264d32de390e8 The package @pruthvi21/use-debounce was found to contain malicious code. Source: ghsa-malware...

Malicious code in electron-volt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7fc79b9e614ad1f38d5c44d7ab287b6adc50f1504b6918a98c6367c360796a The package electron-volt was found to contain malicious code. Source: ghsa-malware 05e20afdf3328e10c94e09a40e27aefc49eda68b38a4c40b917b749a0a12e1cd...

Malicious code in hope-mapboxdraw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df66ea17d715faf27f78cc71434fc12bea5684441bf51f652b2ab98a8eb2787 The package hope-mapboxdraw was found to contain malicious code. Source: ghsa-malware b7e22015802e90e30eb1ecbc96b04e60f72c743f0a41567bbf6259b9b375afb...

Malicious code in package-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1888e34e329bc0ea8f84900de1b8ac52cf5271deb84547900790be3335b0d3e4 The package package-tester was found to contain malicious code. Source: ghsa-malware 1cd7a624ca6e7cb7928904d72a30bb889766f3c6009a09fb20758a0a29b56255...

Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

Malicious code in tiaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eec9aed3f08840a4f5787d8e5edb18c097459657ba29ca488daae2047709701 The package tiaan was found to contain malicious code. Source: ghsa-malware 0135c9cc2fe2d3112342fbb4e91dee9f30647a8d8bc93c0453991d8c51f4710e Any...

Malicious code in url-encode-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce07aaa237eff3cc95c7bb560f4096191d2d5328de45f176f3f8662ca7cd34 The package url-encode-decode was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-git-clean-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577d17cd2429a5652e40b47820dcf0d2effeaf1de1762f1ee7c8b3c14eeb7cb3 The package @quick-start-soft/quick-git-clean-markdown was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190784 Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

MAL-2025-190630 Malicious code in parse-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6800038c1b56247a0767faecf501d0c74de134197bb0edbae2d27b8a958547 The package parse-session was found to contain malicious code. Source: ghsa-malware 5b04d6ff25ce91de5057fed89547b08687055f2ca7a217a2886eecb79c06f9e9...

MAL-2025-190631 Malicious code in tailwind-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9713ae723aefcab52d65da5c1473fffe7835c37849c133d7cecffa7ba7284e66 The package tailwind-inquirer was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vreden-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fed39a318dda2a4b76dc12030fb47d54a1a1b36c7a8186f2eca1ae6bd908d23 The package @vreden-team/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-setfavicon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fc0eceb962b96f45fa2c5b85fe82bd7dd8a56b13ee4fe7e460091b7650af6f The package tailwindcss-setfavicon was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190563 Malicious code in scriptstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d290d07a0dda977b0b0ee316316349991e6f04a93648584b4f21703009e2fb8d The package scriptstealer was found to contain malicious code. Source: ghsa-malware ba731bda22f3fab9794c41e9094fc32268b0da642e5eb7ed54f575c9875ee206...

MAL-2025-190511 Malicious code in signals-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5dc4270646b6f83ba4c0f5f334ec8a5cedd7b16888c9b51a7b3159ddd32ce The package signals-embed was found to contain malicious code. Source: ghsa-malware 9a80ff00c3aa6ab32518f57107ea588aa2da22e76d6db9823783032b89ca146f...

Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-50729 Malicious code in react-icons-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e1d5b1a2b01321da822c843e2013f28320e4b9d4d74487daef59c812557f6 The package react-icons-toolkit was found to contain malicious code. Source: ghsa-malware...

Lexmark Printers Improper Input Validation (CVE-2023-26067)

A trusted internal component of Lexmark devices has an input validation vulnerability. This vulnerability can be leveraged by an attacker who has already compromised the device to escalate privileges. NOTE: This vulnerability cannot be used to compromise a device, it can only be used on a device...