Malicious code in @lpdjs/firestore-repo-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614b34b1f58e1d1c7bb2affcabf4ea2cc7954cf6d6f5c389b4d535101664531d The package @lpdjs/firestore-repo-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in @louisle2/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa91d639a49dce887bee0382a02ee01371c3dfe602f171d9ba450e89a43e1205 The package @louisle2/core was found to contain malicious code. Source: ghsa-malware 60cc6937b19636ed0f05e1a3272c025f2474e3767fd5c44b29da1a2750ace6b4...

Malicious code in asciitranslator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327f54d9fbc5fbd8fbb3edc517dc19c9a8a43791a1f693db85d8e259d4c3dd37 The package asciitranslator was found to contain malicious code. Source: ghsa-malware ec7fadae6b8c223ab9f503f09922adb5c92ed520a19dde2b624c85176f4ecd5...

Malicious code in web-types-htmx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999540b3b5a1066e399c44ecf2f220a5318cdea88dea33416c1a3c55bcf80fb7 The package web-types-htmx was found to contain malicious code. Source: ghsa-malware 07877f867a5e18001cab22b77adf1b5bf737045f63a8ba9a2471208dde03f072...

Malicious code in upload-to-play-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f86113dded695e7f899fe12b243d559d7cb4ddf1f6d3d67aa8318c07ed646d The package upload-to-play-store was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-native-use-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08891181ddf6d5d5a9b94c1742e17b2e3aaa9ed8fd8fdab8b22fbd163e86d6bf The package react-native-use-modal was found to contain malicious code. Source: ghsa-malware...

MAL-2025-149905 Malicious code in aes-core-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b3e5a270d63d751fe142a9d81d59870ee3c9bbe18403a4da5fbff3c5cce2b8 The package aes-core-valid-ipherv was found to contain malicious code. Source: ghsa-malware...

Malicious code in dandh8112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f2bb5fabeb29dfa7cd1921c6c28f491ec017dddaae26b427f956b1f5f3c288 The package dandh8112 was found to contain malicious code. Source: ghsa-malware 439693dc034f10b79277c48f7d3457adc09a623d5d067afa83543f5393f8825e Any...

MAL-2025-49361 Malicious code in react-notifications-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe66f8e85ad0ad7c2682e9640e0f2a48344bcef9beeaa8de12e5e687744acf The package react-notifications-alert was found to contain malicious code. Source: ghsa-malware...

Malicious code in parallel-coordinates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a6532ff0ec9ac1daec9c21c05c508de189c1f5d5012fc6b8aee4feb9ce2b43 The package parallel-coordinates was found to contain malicious code. Source: ghsa-malware...

Malicious code in abeya-tg-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d3c8662c688eccce2f52334ff40029218abfe48b990a194be49c6e01f5fb57 The package abeya-tg-api was found to contain malicious code. Source: ghsa-malware 01b4d597b84a4aa049cd970002730cf004fb59ff7fb53a7c70196644a0c047e4 A...

Malicious code in bael-god-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ba754b9dbef244bd2b53886b1f45560769963fb3cec0acdca0b97146c4748a The package bael-god-admin was found to contain malicious code. Source: ghsa-malware a5f348ec1bb90ae0b0173cad94148bc4e8942fd31411b6ae86b2a81f71aa4587...

MAL-2025-48968 Malicious code in @gitlab-test/yarn-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f274342e8c6f4a200134b68b571eb1eb5d9f01c5d28f5d445b0da3fff6808ff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aio-commerce-sdk/config-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85b2c7fad2af3e611f7fe4d8399529e1b897e4ca8838e1a5db0a2c61acb4d998 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49056 Malicious code in ts-react-important-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f663ee64d0eec8043b09ffac22066bd7622e149084a6cb99f128fe1f0ee245e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acme-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b71a81b10d7836d7a4aeb72b36d2d7c0a4c94e7697d47254dc9c15ecd803bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49026 Malicious code in no-only-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0357be77e7b06c343a0d5b8671fc3a8983d9d1187381a5159b3175a579ebcaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49087 Malicious code in geopost-angular-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b519cc34afbb8ac8a6adcebfa4765a2553ad14947386e79821c5ad76ad67684a The package geopost-angular-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-modal-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83da8504c0563910980ac20ded60f00f0dcec4e105148e06d6115d0596162b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in generate-delta-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad06efd44d16d4917dd43ae0c9464faaffb8c5f2db9f3b8b3a94a36de4722ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...