Malicious code in luno-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2620f6e7e546cf45578383002edf88f0d14cfff7c3b3fbdadff49d591e9a67d The package luno-api was found to contain malicious code. Source: ghsa-malware b14565c7974772eb7c5d608e000f39017115adb0304131b6d1b03f7402fa9d1f Any...

Malicious code in react-native-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96159f9c8f74a56ea1f03322401befd0e090840e21dff7d1cc37db649e8cd58 The package react-native-fetch was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190964 Malicious code in hopedraw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b92770a39e89559f4745f8c6d264f55c2f56aa858388f2b23fe19d8ac5cfb7 The package hopedraw was found to contain malicious code. Source: ghsa-malware 5816fd13331bdf9cddedac9d250bbe6f4d28bafe88b9bea201c4f6cbbb1f2448 Any...

Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7ee33a69d9005442fb0347dfb87c303e2acd8cd146d8a85d0cecdc90f94bc3 The package @asyncapi/java-spring-cloud-stream-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in redux-router-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3336c78dffab3cf95e60180dad5e67109d7de3e5dbfc888d10874c466a4088c The package redux-router-kit was found to contain malicious code. Source: ghsa-malware 6714063bc703d6750a4f6a6eedaa083372d15b7b9fa6eef3c58492ac74792b...

MAL-2025-190562 Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

Malicious code in application-phskck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6943455b71ad210483f41c6aad1617346d5cf05804711e7d3c08a94cd5d35084 The package application-phskck was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190497 Malicious code in tailwindcss-setflex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d80169fb6c203bac400f4a79925a5a54eef1ef740164552a568e6e6604f9427 The package tailwindcss-setflex was found to contain malicious code. Source: ghsa-malware...

Malicious code in no-barrel-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26ffac772339a03c38a909739d6648394caa3bf5f5d6052d35cb5c0ef21ac33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-50730 Malicious code in synqroomkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...

Malicious code in mojio-client-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fea28b1c502ade1afb436a22ffc2bd83e1c413dd85b274370f805ec0760be91 The package mojio-client-lite was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49359 Malicious code in jito-prop-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a17a99c383a4fa9a1c8e550e6f511297b7600b954644d178923e8073d3a9c5 The package jito-prop-exec was found to contain malicious code. Source: ghsa-malware 5a0c01062e391db56237859b73d9b8bbc69c940292f96aed7a72b1f2f7dd7d09...

Malicious code in aes-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f22d763f4c915454a17152533dbf628f16eef45bf66f27ecf13414baa94002c The package aes-valid-ipherv was found to contain malicious code. Source: ghsa-malware 22297960d5b9fc9c09290fc460a632ff653b9b660089fa10ffff05c2efc053...

MAL-2025-49326 Malicious code in monophonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638fb2d3ef5574e603743a5f8545f9bd01c8d2f544f628cbe041b12a94497155 The package monophonic was found to contain malicious code. Source: ghsa-malware 7a86916baf347f5489f90e15cce360f5a7bea0ba71f59130e66754f1c4acec9a Any...

Malicious code in genesis-drop-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edb9a242cd3f939420031dd53e6057ae90e644f3a08fdc50bc1f92d1296832e The package genesis-drop-actions was found to contain malicious code. Source: ghsa-malware...

Malicious code in @gitlab-lsp/pkg-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df0575a200975029552912084573cf0331e1cf02ccad8e8fd7e024536143ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49057 Malicious code in twilio-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ffcb178cf9c4a8cc2e9e550a170ff42fa42a341a71eb80330990ce0fc4fe3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49005 Malicious code in firefly-utilities-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b473a3935398e8bbe5ca323982f141f6961f34964660c00cc78fb21d922af The package firefly-utilities-js was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-web-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4085854cc31bff9ffd272cf1faf16a2cbe3d67d700b330ef7d21108bdd0f05e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsx-a11y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d8158b553a773a363a5a4bbce1477f430fae7a45c29fe8f1855401337f4b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...