Malicious code in @posthog/rrweb-replay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191134 Malicious code in nitroping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab13b3f9a9100541d146c2728a90d45bfe20125de13d0f39196f03259918c1b9 No a static rule matches and no traced-code findings of installer-side attack behavior were produced for this package version. There is no evidence o...

MAL-2025-191118 Malicious code in kinvey-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd908bc42e771527ecff3b0ef336122eb8d484f23f0402f511ca30dcb7b37dc The package kinvey-cli-wrapper was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191055 Malicious code in @thedelta/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf18ec0224183e37e3d7ce155ce74e57988e6cdf5c817d06f892ad4b22a7546 The package @thedelta/eslint-config was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191050 Malicious code in @relyt/claude-context-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c316b01a92bfd324ed27916a84ad109a9a198650509ea633aaa7ab97e5afcf9 The package @relyt/claude-context-core was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191036 Malicious code in @ntnx/t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865f9cc29095e84318d97631a2242512c5361ad8d820cd6212a8cb06417c92a The package @ntnx/t was found to contain malicious code. Source: ghsa-malware a56d53a5cf562204b62c1283f7cc997da367c0eb1cd09c913dcedbe5469bff6e Any...

MAL-2025-191098 Malicious code in frontity-starter-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b1b354fa335b058cf3b6af9fd24bc83609696da8937e6d103a4bdf3196ec2f The package frontity-starter-theme was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191032 Malicious code in @lessondesk/schoolbus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c14a4cce7a095ba23b1ec9898ad654afc8e736c94cf26a1b8c15aa123973fe9 The package @lessondesk/schoolbus was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191068 Malicious code in axios-timed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662813496549443a6e93b09a2f5fe8268f47117b82805c40b631d7ed3d1f7 The package axios-timed was found to contain malicious code. Source: ghsa-malware 1ffd6b2c5ba321504c3373b543278ee5f5a0f3de43e0c7cca70793a90a7680a8 An...

MAL-2025-191154 Malicious code in webpack-loader-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac614016dd648eebd83cab4f9c04585d52439a98b69d5e02694cb48119dfd96 The package webpack-loader-httpfile was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191152 Malicious code in wallet-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53103558dbb7f0fa15aed8747785784f2e4483cb8a2dc5356bb51f88b557e42c The package wallet-type was found to contain malicious code. Source: ghsa-malware a6b9e10473762dd8f4f65c9dbd42b4fd51094b526f5d6962441f415683799c50 An...

MAL-2025-191101 Malicious code in generator-meteor-stock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678199611d26a80c99b9cad377ac570dda69e8bc8ed1114a1178d98c2c611973 The package generator-meteor-stock was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191121 Malicious code in kwami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962220b95b8768ca9d0f5211baf9f5169003e56d4e99013aee0fc583b97dd51b The package kwami was found to contain malicious code. Source: ghsa-malware 4bb8cadf47cecbcb6cc8b75632c3af5f67d8d202bc8a30ac4dad5521edcadfd2 Any...

MAL-2025-191135 Malicious code in normal-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3cc821206cbfa969e8f4e3472a09caf43736b8e70d4ec80ed20931b64406b8 The package normal-store was found to contain malicious code. Source: ghsa-malware 1e1d6a2537e74912ec3831bf85e49e8ba908fc28838ec60c07f7218717ba36ae A...

MAL-2025-191140 Malicious code in piclite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d776815ebc9f644d4e180897c8faecdb8179b86900d868934148989047d6ef55 The package piclite was found to contain malicious code. Source: ghsa-malware 298d5c66cb85081f480bec9e5c38bc7c2d419d609714be7346d3bafb0b2525eb Any...

MAL-2025-190983 Malicious code in package-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1888e34e329bc0ea8f84900de1b8ac52cf5271deb84547900790be3335b0d3e4 The package package-tester was found to contain malicious code. Source: ghsa-malware 1cd7a624ca6e7cb7928904d72a30bb889766f3c6009a09fb20758a0a29b56255...

MAL-2025-190958 Malicious code in email-deliverability-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074d5f649d3b599b504b29b284fa8a5c5a71d305b58d63d38f2ee3c9202eb982 The package email-deliverability-tester was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190955 Malicious code in designstudiouiux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36c1311e04a95981cee366a30d6aee0dd7f15421166231abbba74f617035927 The package designstudiouiux was found to contain malicious code. Source: ghsa-malware 0fd8a6a7d5cef9c71c739d05d4e75644f2a303bcae6db5f3b32680d2fc5627...

MAL-2025-191015 Malicious code in super-commit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c1af7533a4794e88dc233547249b656c3a1fd1a87109827755918da11151fbe The package super-commit was found to contain malicious code. Source: ghsa-malware 4ef89565a74f08dc54807acd41e1218c07d6d9ffdb73411163e95c66ba080e61 A...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...