Malicious code in vite-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d63741ea6b6aadbc224aabf56e98c5eb7b664d7554dbb502869a97ffffb2f46 The package vite-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47f4a2a33c66b0dd4885e14a3daac5b93ab92ff16f42af9a40c7883bc0a8fe7 The package @trigo/fsm was found to contain malicious code. Source: ghsa-malware 3a0c1d2449da835d77ebed8c99e152a8d6a2015eb1ce5d754808650e257c7776 Any...

Malicious code in @zapier/zapier-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39a04949d436340c422fef75a4dab8c20b487218e69e62cdcd198bddbe9ee0e The package @zapier/zapier-sdk was found to contain malicious code. Source: ghsa-malware...

Malicious code in @validate-pubkey/hex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05db2afe6b0d7557f2c2153dd15df68ab69667e8402bf92f2b2e2d900eb5728f The package @validate-pubkey/hex was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190629 Malicious code in loliloli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49613dc24146ca83bc9bd4c3192468ff9b16fc61797e4b79a957d79f98d3552b The package loliloli was found to contain malicious code. Source: ghsa-malware 6188273fee11225ff9b29efe7923768ac1792c131fd40768f5127839c6be6ceb Any...

MAL-2025-190498 Malicious code in validator-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e37a6017e345fd411d1589cfff26c773d65d94f231505eae6ca3a90b448c4a The package validator-node was found to contain malicious code. Source: ghsa-malware d3f7ef04f70e6978a9f771255f136d634d2907c42c7acf71a42c4c93e7e5d333...

Malicious code in grid-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b0798fc09c824e110a36baea640ebc023c337f246ab9cc2b6647eb4b9bddad The package grid-settings was found to contain malicious code. Source: ghsa-malware 4461bdacbed2361a56a39a0251d7a47f2454616c944b5380680198ea97f7ef20...

Malicious code in graphhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3f531a91594ad386dc82c959af2f53b1e335972b4a7a451fe0184252616c3 The package graphhub was found to contain malicious code. Source: ghsa-malware 4b0d6ee11320721cc3e65d9887c3b251b574bc7e67419fe63dedaa18b15dad9b Any...

MAL-2025-49379 Malicious code in @chatclub/claude-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6acfccb78a615c7f037fe5dbd1001d9a77ca4015c89c94122ba5dd78978b66b The package @chatclub/claude-code was found to contain malicious code. Source: ghsa-malware...

Malicious code in sabay-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f452097f93c1e4228b1e2204035d8fd6b3fa34b8315538d750c8b6df30f766 The package sabay-tg-api was found to contain malicious code. Source: ghsa-malware 0937cd6e3bb2fab7264080086c8daaa0096e2efe839d71325cffbdee6c661011 A...

Malicious code in muleforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a547ae30a3611da545a607846c864a52e6d4c02c515dc4280b5b74b841c6f8e The package muleforge was found to contain malicious code. Source: ghsa-malware 4337a4cda2c79d821c2425b131f7fbf169472e4b8b4e07a7646ed384cb7a7b2c Any...

Malicious code in transform-react-jsx-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd1c3c75a248290b6685831711ef1fa1ec32244ea7ab218a36c42a6b5163e560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lion-based-ui-labs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402aef950dd8db7a0a6a3a29bf2658df3695836e4ccd542400e331b1b34e5a28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-custom-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290264bf054a89de7b611685ab2f5a9720fd03d6e90c3631d42bbef29259ec48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inline-react-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39f65737779d34f941dcee3ee4e332a0ca54196d2cbc4e848e57e20ecf85893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49008 Malicious code in google-cloud-functions-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a567cfa0e02cd1ed3af8d68659a2793383757acf34fa5ac0500890114ab1e2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skyscanner-with-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269ee691d4871e49dccfe0f756848ea5ef13360c6ff86d64bc7ddb718ac5d423 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in func-analysist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80289c38bf711f5ac60787399d199be29ca23f0695b947ee46825c9a3ce226bf The package func-analysist was found to contain malicious code. Source: ghsa-malware bb257e8ae472109cbe751b79ea838ddb8a0272301fac276ca6ade81aaa72b7d9...

Malicious code in energy-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4830ca4abd86f26380368ac28f819b1c5a209bb67804a59ac916cab4f96099f6 The package energy-portal was found to contain malicious code. Source: ghsa-malware de4d4f73709d8cd24cf252de30a2c865264a7a804813494674c2a6cb15337c8e...

Malicious code in dataflow-unified (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeb92e0d113a35c9340e56c29e540f04d548f6e42f05f369d8e22fb5d78dea39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...