Malicious code in @ensdomains/renewal-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727920a0b3da80ce1061cf9557e1d3ef72a90618523b692406438b7150061dad The package @ensdomains/renewal-widget was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/react-daum-postcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6730961ddc6bcfd14bc8564e2a8ef3d34d757e1ffae65ed7ff88232e115104 The package @actbase/react-daum-postcode was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-library-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f28e9ee69ccd4dc343423efa26fbdc798388c2d4abdb85588cc5a532dd2c3 The package react-library-setup was found to contain malicious code. Source: ghsa-malware...

Malicious code in @trigo/fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47f4a2a33c66b0dd4885e14a3daac5b93ab92ff16f42af9a40c7883bc0a8fe7 The package @trigo/fsm was found to contain malicious code. Source: ghsa-malware 3a0c1d2449da835d77ebed8c99e152a8d6a2015eb1ce5d754808650e257c7776 Any...

Malicious code in shinhan-limit-scrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae6aee79d5386d3525290fdc37160052ab2cfc88cfe444751cf1e0c09122b48 The package shinhan-limit-scrap was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190560 Malicious code in mongoose-odm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96769a7d9b829c0679f6d50c1f0c7cf119eb49605c5dc6d9b7b1a05c2b655c9 The package mongoose-odm was found to contain malicious code. Source: ghsa-malware f652b1e2a0f5c99554f46ab757d97e6038f7e5cac1d2c51a2a01851b744884f2 A...

MAL-2025-190563 Malicious code in scriptstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d290d07a0dda977b0b0ee316316349991e6f04a93648584b4f21703009e2fb8d The package scriptstealer was found to contain malicious code. Source: ghsa-malware ba731bda22f3fab9794c41e9094fc32268b0da642e5eb7ed54f575c9875ee206...

Malicious code in chain-test-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e0c036eeb1631fbe88e6fc1c18dc89f31a900e1d528bd2027a2aef1eb35a60 The package chain-test-async was found to contain malicious code. Source: ghsa-malware c1d03d8b6de88ac68ebdd7ea00a039ed4f3d071cda41ca8e038c5cad8eb212...

MAL-2025-149905 Malicious code in aes-core-valid-ipherv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b3e5a270d63d751fe142a9d81d59870ee3c9bbe18403a4da5fbff3c5cce2b8 The package aes-core-valid-ipherv was found to contain malicious code. Source: ghsa-malware...

Malicious code in supports-validation-checkerlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781852f3dbd6b5aad45817413559a7dece6950db6702bc4d70d20904897bb099 The package supports-validation-checkerlib was found to contain malicious code. Source: ghsa-malware...

Malicious code in custom-tg-bot-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cef01d344d07be2f72b365cb97f994a5cea38eef145b5b25de21f1784cd740 The package custom-tg-bot-plan was found to contain malicious code. Source: ghsa-malware...

Malicious code in dizcordjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 679877c4e96760ae7dbd53d81c46c410bb32a9465f3288f9db08b21a127e17c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethesjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea9c413600cb75bea29c7e567157efcaa07b76b9efbb30cb378943bd81eb760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49082 Malicious code in dizcordjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 679877c4e96760ae7dbd53d81c46c410bb32a9465f3288f9db08b21a127e17c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49037 Malicious code in react-naming-convention (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f1de3b293c216a9b6c48e3cdb120f41ef3a161e4aaa7be1aa115440108c0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aio-commerce-sdk/config-typedoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7115c3c8e9d8049f239251eeaf99504698b6eea04f36d5490dedff17b173f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49030 Malicious code in polyfill-regenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7d3f5ade208f63787145ecad7643a32b6bf4525494a136967abcd7d0ba2e720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48993 Malicious code in durablefunctionsmonitor-vscodeext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0bcd6dd0f47781eb145c4a57e94a505ad8fe070437e096926c7c5a7601087b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49063 Malicious code in ul-inline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6bb031b2303d28ce8296da9c8f534d9576044e57faffcf455a70b24aa6b9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...