MAL-2025-191457 Malicious code in @medusajs/medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa5b0f943792c37642fca6c2ef986192e352a69adc62d136967da06a71efe27 The package @medusajs/medusa was found to contain malicious code. Source: ghsa-malware 01bb6c10c02f2427b66ecf6036cf38726397291c4de895e6c942bf3cdf78f0...

Malicious code in quickswap-smart-order-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1978f5a844fe2a4875f031a7498db4411fdf687fe752f1dbbcea7a6a31fba The package quickswap-smart-order-router was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191448 Malicious code in vue-browserupdate-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b54bd42aca6d571419286ebc95bb3a97c702b62db009f3310494e1d4c8ce081 The package vue-browserupdate-nuxt was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191216 Malicious code in @everreal/validate-esmoduleinterop-imports (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab8b8345156c4c77c99622cb83f321f5904503094e6d54a19585d087a7849a6 The package @everreal/validate-esmoduleinterop-imports was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191452 Malicious code in @eventcatalog/generator-asyncapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9598dd9b72db501adb05bcad416fa140dc327848558cdcca03a10d2b127113b The package @eventcatalog/generator-asyncapi was found to contain malicious code. Source: ghsa-malware...

Malicious code in @quick-start-soft/quick-markdown-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dab6051ba6edf09fba5f1e39d726a21545c79da23be96476a602044ec7314eb The package @quick-start-soft/quick-markdown-translator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191036 Malicious code in @ntnx/t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865f9cc29095e84318d97631a2242512c5361ad8d820cd6212a8cb06417c92a The package @ntnx/t was found to contain malicious code. Source: ghsa-malware a56d53a5cf562204b62c1283f7cc997da367c0eb1cd09c913dcedbe5469bff6e Any...

Malicious code in better-auth-nuxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a2c1f5ccee32dc0e1c83e0664d434add6b894caa54c57f137fe0367cba558f The package better-auth-nuxt was found to contain malicious code. Source: ghsa-malware 14fe0837bf9131779e90c6a1e8530acbe2d811b2df09dfa25d2d86c5a151c0...

Malicious code in create-kinvey-flex-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18f134df78210871fbeb0ee41ee973c4622f7c2f19cde796751a63da45cba75 The package create-kinvey-flex-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in best_gpio_controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b598d2978754ee5475c3bd96f57df9ebcd271bf5ecb0201c94f15b05b53f1e9 The package bestgpiocontroller was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191026 Malicious code in @lessondesk/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c812dd964064f404443160aac0a9fddb5dccef95ecfb131a074fcf7176bd49f The package @lessondesk/api-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in blob-to-base64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c6f8ab4b22e2ba28bac2f82c7c9d577974aafda6f190626178907579e5a474 The package blob-to-base64 was found to contain malicious code. Source: ghsa-malware 200b8ce0ee413e9267ce3a929dfcf4f072860e143f01046f3361d247b9a9b6fa...

Malicious code in bidirectional-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9232b33b143ce14e500ddb0d725a5b646a180ad4bd7dbf1fc8890baefdd22f95 The package bidirectional-adapter was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191104 Malicious code in gitsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35755a0fed2224e2746cd32f8d78ac75980b4669f74e99603a5420f45712cfb9 The package gitsafe was found to contain malicious code. Source: ghsa-malware 9452f81203482947db7c464bd8a2250d768724dc16837b1e6d56b5c561b343ed Any...

Malicious code in gulp-inject-envs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230a528331dc71aa1fa5cb1d9fd8146d79d7e92f3aae2efd2ce7c177640b337 The package gulp-inject-envs was found to contain malicious code. Source: ghsa-malware 5dafa09839ea07c586670ac1a302805fb65ffaf32d1641dcab2be569a68231...

MAL-2025-191105 Malicious code in gulp-inject-envs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230a528331dc71aa1fa5cb1d9fd8146d79d7e92f3aae2efd2ce7c177640b337 The package gulp-inject-envs was found to contain malicious code. Source: ghsa-malware 5dafa09839ea07c586670ac1a302805fb65ffaf32d1641dcab2be569a68231...

Malicious code in jquery-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31127dd6191c9d3e68e94d705b43d24066f06f37b41f659a5a6831a8a811fc11 The package jquery-bindings was found to contain malicious code. Source: ghsa-malware eb6c4671167bd91b31b632f661a4bc8a3d627412796b9899fae3d0797eb51e3...

Malicious code in lang-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7644eb22af82aaf1aeebcd8954139ce3dc9b43a0db43be02605ee10037e3f75 The package lang-codes was found to contain malicious code. Source: ghsa-malware 80738e6b29d50856453735fa6d92a27222eb3def027ae81195eb7555e076f7df Any...

MAL-2025-191156 Malicious code in zuper-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2065f0dd8abd271cf1dd9577497f7fb19724820c50925509236093e73567 The package zuper-sdk was found to contain malicious code. Source: ghsa-malware c84dbb98c137f6b50ce20f0cae6113a3d32f5cd6910583273c4d11d4966d105c Any...

Malicious code in super-commit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1af7533a4794e88dc233547249b656c3a1fd1a87109827755918da11151fbe The package super-commit was found to contain malicious code. Source: ghsa-malware 4ef89565a74f08dc54807acd41e1218c07d6d9ffdb73411163e95c66ba080e61 A...