MAL-2026-1217 Malicious code in @vk-cloud-billing/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b5a4d83fe25260e7b73b7d40a2d8827f8ebe841ace75e3f03140b4861eb836 The package @vk-cloud-billing/common was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-as-confirmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2168a933bb356d4df8f0bdf1f0bbdcf7f8adc5622ed08ca11646b762c1ffd313 The package chai-as-confirmed was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1218 Malicious code in chai-as-confirmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2168a933bb356d4df8f0bdf1f0bbdcf7f8adc5622ed08ca11646b762c1ffd313 The package chai-as-confirmed was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-as-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff6a2f2561ea67c1d084cbfc1ebdd5364668aab3d06257cb2cbeea42ce5a3 The package chai-as-mock was found to contain malicious code. Source: ghsa-malware 6ab0e6eb41241ac06a623d9e7fa230c2d68067904fd48aa422ab8c2db1cd23e4 A...

MAL-2026-1194 Malicious code in cmc-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7378c3fbef6f6a80690e0834d8bb1b459165cc9b55bc4d2ac2dcc0c1a574983a The package cmc-client was found to contain malicious code. Source: ghsa-malware 5986e6b65452c046e565efac71b9b6ce753244cfb1c7f2d7ce11751a5f827f69 Any...

MAL-2026-1193 Malicious code in cloud-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d014766db57fb4d6cceffc9e45821e7c14135a358abdc4db25a0310538266699 The package cloud-apis was found to contain malicious code. Source: ghsa-malware 34de661e0892c5941755ca8d9db5fbcd64da940f5b21755f4b20862a758fe769 Any...

MAL-2026-1200 Malicious code in mongoose-apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8158b4b1cc5affba57a810926c5765a7af056b7e89cf2ce07da0615144bac920 The package mongoose-apis was found to contain malicious code. Source: ghsa-malware b967e890598bf7e59192b0eb97d1c9ef5d00f60f2730955e684e67b3acfe888f...

Malicious code in consolelofy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9026237dcb17ce59b31ce42b7af60ddbe094cb955735a5dc1833275d5f01c7a The package consolelofy was found to contain malicious code. Source: ghsa-malware a251667effca1d80bd932709965abc6f6c61172812756404c3b8b2d7b340e23f An...

Malicious code in selfbot-lofy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef24f8180f463b198ff4fea466684c4439a31102aead233f8faa51b587ac0bb9 The package selfbot-lofy was found to contain malicious code. Source: ghsa-malware 1af8492fa4885fa5b969d5ef3947595dffa2f959bb4e1de73b9ca504dec215a8 A...

Malicious code in @powpegtest/powpeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acf5c813243b7a0b83c02048de4112604eb9ad97d612f3822206a0cfbf174ad The package @powpegtest/powpeg was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1198 Malicious code in flycord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f477b30e27717915d1f5a29429d03c3ca68513e4c2b8faef87404ee2dd399324 The package flycord was found to contain malicious code. Source: ghsa-malware 2a8f9b1be8c669768e145dc79e2d5345b794d5b06f8e1b87a1371efce3339395 Any...

Malicious code in ethersnog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2683fe026b4debb111c0d435b8f9e4b36313390f85675e0e9dd37a64c14943 The package ethersnog was found to contain malicious code. Source: ghsa-malware 7c7570bb15b95e9263e64c0289e35eed6b6778119000686b28a36bb286b15e54 Any...

MAL-2026-1171 Malicious code in @snazaah/davey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f71f42be87797ef9a1316bba8adb9bdef08cc765a42d1b707487f790846af The package @snazaah/davey was found to contain malicious code. Source: ghsa-malware 1e647d7cf3afc1b7a160585b664e75a2515b6b9e00925bdbc30e20625731d490...

Malicious code in danzxoffc74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e877557d9e7863e313c0524e6752daab739308df7d062c227dc45da6422e06a The package danzxoffc74 was found to contain malicious code. Source: ghsa-malware c665df7f545b35a9e4e23e8bddad61473e5846f08a58ed73bcbb16688239421e An...

Malicious code in rullzdigital (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc6a9ad8fc8b038ba42a8fc8e3175d9e519340d5fbb9f36c946d50495efe670 The package rullzdigital was found to contain malicious code. Source: ghsa-malware 661254fd70224e2719b2260797867b5d063b1928340696642f8b683b04473b06 A...

MAL-2026-1150 Malicious code in libsignal-yazxz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d9a354d77eada4afacd4c7b884cd9b3c9487007f544b4de3068e3c3348b593 The package libsignal-yazxz was found to contain malicious code. Source: ghsa-malware 04f7491f3c5360ba3b0ea3989fbc6fabe1d113734b5f7824bbe6fe274d830f8...

MAL-2026-1134 Malicious code in ts-big-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 644a6ea1bec80a1e6f2dd3ee69a62602237f916e6b2877e126e18d8ef5b7f691 The package ts-big-number was found to contain malicious code. Source: ghsa-malware 490d5033b9169ec80de58a0c2bb8bdbfe435f06200e0b7cc729ce393f2449d40...

Malicious code in @yaoii-bails/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1d0d12bd58b983f5d0429e35aabbe5aff4e7206c1198199dff00f8d7edc3c6 The package @yaoii-bails/baileys was found to contain malicious code. Source: ghsa-malware...

MAL-2026-1103 Malicious code in bee-quarl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90e7b3eadcb23e766223167d16f561fd64fe44ec63f6e77afefe38966da2fec The package bee-quarl was found to contain malicious code. Source: ghsa-malware 642b83461b49019b47d27820b1dbaed267f2365eecf5fc74467d02192ec662aa Any...

Malicious code in socket-dgxeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b1cdce1957669bd7cca7bb7c90b018a87fad6ed9ea49b4874f127272f0c00d The package socket-dgxeon was found to contain malicious code. Source: ghsa-malware 0f36366d3dd38134f3c8176992483c8c67f2e502ca9b774a4ea5a3fc2d428efc...