MAL-2025-192671 Malicious code in spamsms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cf698aa8fd11ac3d871633f3a2115632a110296a8965f5857a8fd8835a67a6 The package spamsms was found to contain malicious code. Source: ghsa-malware 0ee3e4d2eb02c7d8a5cb8bc15304efb396753ec2e1cecfc5c4b1b01b469930af Any...

Malicious code in xmlwtf3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc397291400d5d396c50c42966b6c482fb92a577a17ad2440c2ab4c7f0619e6 The package xmlwtf3 was found to contain malicious code. Source: ghsa-malware f1aef41363b46dac1d30ba3bd916904df95fce8278f6b3abed14f7b48002d2c8 Any...

Malicious code in ahmed_salem_o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ccf3722bcf6828ca9cc9ed0f332cb3778d8a8be73146f96edb1d381a4649f54 The package ahmedsalemo was found to contain malicious code. Source: ghsa-malware dcde03f9a78b367c9044b92cfac2900e588491df6c7894a65c4b2658e26c7e65 An...

MAL-2025-192657 Malicious code in yt-smm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3641ecf42237a55c9fb81c4368aa7b83a42d2110a64a733f45d27005cf38dc26 The package yt-smm was found to contain malicious code. Source: ghsa-malware b4d96978cd4e109ed8b360f551af24fd1621dd659f63a490c9de077b587f607b Any...

MAL-2025-192613 Malicious code in my-ctf-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1937327d3ed32ee35590bce097cac61388dff43915682f2fceee4e7cc074c29f The package my-ctf-package was found to contain malicious code. Source: ghsa-malware 4ffe4e6f718d8543dc984772c0f919e029ffc02ed49b70f89ba018d787408ddb...

MAL-2025-192593 Malicious code in openhands-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3094854e6f43f64c218e6ccdf21f319cff916fef4a412442faccf4b9cd616fe9 The package openhands-frontend was found to contain malicious code. Source: ghsa-malware...

Malicious code in prod-natwest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd39817ff9b18b049493c5014a7a0d4f69bd3cf2f4f2a2aebff64453e6ca7519 The package prod-natwest was found to contain malicious code. Source: ghsa-malware efa89a8af6324d2f6726e938c72b64a0b9a1ffbe7788455e95c7ff05752aba50 A...

MAL-2025-192578 Malicious code in xboxlive-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa54accd06c11d8f868fa0bc7915782404360d01db3c5f80d735584ca984dc8 The package xboxlive-auth was found to contain malicious code. Source: ghsa-malware 330ca3dbdf0006df9f2a21edc3027e6f158c2ee2b4f7c26498a386198e869878...

Malicious code in bignumex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c839a719fb3ac340e251cb4eb34af0d9240de8d7e9f13605963617d9e14929b3 The package bignumex was found to contain malicious code. Source: ghsa-malware 32884ff132ca375f235dd1d6e843a3178d5777c11127c3f8f155472d2f26a455 Any...

Malicious code in sfdc-abstract-legend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f7f51ba229ced87dfa4e1c978407d9e716ba77115ad38601c49896e0584bb The package sfdc-abstract-legend was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192375 Malicious code in tensor-fi-utils-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 097848a520bc6a7316c011e97b306f4743b5498acdeccea54d5d4a0ab44bdebd The package tensor-fi-utils-core was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-svg-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0653c3340d723105ee0db3b1e440d764e9c750287b1f50e796b4ce847ddaee46 The package react-svg-bundler was found to contain malicious code. Source: ghsa-malware...

Malicious code in email-regexed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a196eb68421b32096da5ff260a7a9aca6f9d74937768b62ae4aff437c0c89729 The package email-regexed was found to contain malicious code. Source: ghsa-malware 0dac0855a64ab32c42fcd0ab7694e81f0ca1ba1cbedb27990dad05e7162c51e1...

MAL-2025-191546 Malicious code in chai-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f6f6dd537cdb195504efe77187096dff2f05e7ffd064975c9f54a4d45e17b9 The package chai-status was found to contain malicious code. Source: ghsa-malware ac16fe9f8e1d6ef61aa920967a83f93dc57d69f70b534ac70a2e59870b2b3533 An...

Malicious code in ui-cluster-driver-otccce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4e0c2fa1483c63a547be16744188b63b2c41acb5704b081cd0cdc46b570458 The package ui-cluster-driver-otccce was found to contain malicious code. Source: ghsa-malware...

Malicious code in nodenetbanxsdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d713c278d17ee8b13193f95b612afbe466e885e58f6cab96ccc1ce764b9d7e27 The package nodenetbanxsdk was found to contain malicious code. Source: ghsa-malware d369a1b27a2dd8b6f16340c943462366dc30c2e54cf93cc4697c498c646d061d...

MAL-2025-191536 Malicious code in @wxi-dev/serverless-tsc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2044be2f48924b1fbab5515839d24440bd12b3d7df98de95a6b0881665ab3f94 The package @wxi-dev/serverless-tsc-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191366 Malicious code in @voiceflow/prettier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d559f73440d8fdf3f6f155244ce54b5d8d829700d5780778a26f0ac94fb5b59e The package @voiceflow/prettier-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in ra-auth-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddebb70a73861543e5a68b94eb70a9b3e2fa3726a977ef776f8ef3fc75f0e76 The package ra-auth-firebase was found to contain malicious code. Source: ghsa-malware d4c20e629d2ccf83a4cc1a771392c0f879de71df77471d5e822fc511e415cb...

Malicious code in @alexadark/gatsby-theme-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8516b639c9bdcc54192b6e206090c381522d0f48987715c16f5c68a90ca3b8f4 The package @alexadark/gatsby-theme-events was found to contain malicious code. Source: ghsa-malware...