MAL-2025-191440 Malicious code in unemail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f01c1496d6ec0bc5cd7476bf38fea354f557e82b7cfdd597b12d840dbcf1e9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2025-191424 Malicious code in shell-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec827763d5d35bb7fe06832d19091679dbafd7a46c4ac4891abf44bd656d2795 The package shell-exec was found to contain malicious code. Source: ghsa-malware 23f9910c5869fcb7ab6c5cc5c231c47e73e39735d9b9d1abf55109e19585f0a4 Any...

Malicious code in solomon-v3-stories (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c2b76ec7ca12640f848ff834bd3a10c3c2f6247a9b372905bf57e2d9f2194 The package solomon-v3-stories was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191428 Malicious code in solomon-v3-stories (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c2b76ec7ca12640f848ff834bd3a10c3c2f6247a9b372905bf57e2d9f2194 The package solomon-v3-stories was found to contain malicious code. Source: ghsa-malware...

Malicious code in solomon-v3-ui-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc1913e7f746026b2bdfcb099e4e6cc55dd56a41c2a5cf50bfc9e9ce075b75e The package solomon-v3-ui-wrapper was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191437 Malicious code in ts-relay-cursor-paging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8294a2a4839120e6ebab7dabdd05718b4208ab8fcf4be3cb922929a79e25764 The package ts-relay-cursor-paging was found to contain malicious code. Source: ghsa-malware...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal due to unsafe path handling. An attacker can access, overwrite, or delete files outside the intended directories by supplying specially crafted names or archive entries containing path traversal sequences...

MAL-2025-191317 Malicious code in @silgi/permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79c1aefaf6282e92f02a2de0191e6d673a1750c97c6646e377d29f1006321c9 The package @silgi/permission was found to contain malicious code. Source: ghsa-malware...

Malicious code in @silgi/openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37d75ae054be71f7d9d4913bf4e5b1c0e7249774278432c33d89d871d99f28 The package @silgi/openapi was found to contain malicious code. Source: ghsa-malware 3c5eda9815ba5af459be6844eab3b3e9f5cb4615e738904bd8214eb62a2c93e7...

MAL-2025-191417 Malicious code in rediff-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b40d95d5fff90452e9bba5b17b0ddb9c3842ffcb276e9418428a9b969f60129 The package rediff-viewer was found to contain malicious code. Source: ghsa-malware 3d19e3e0f8fc94b15fad4cfc7a82c6f22f66e111e2ba3c5ce2eaf4acc69e288d...

MAL-2025-191415 Malicious code in react-scrambled-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3888a54f9c5c14abb5fd0b64ec41778b1bc989da36cd5e48a480514eb81b9e57 The package react-scrambled-text was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191138 Malicious code in pergel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0beb04dcc264a7b8ea3f1b3c48c402609868184158f6bd8615a1f81fc5a29315 The package pergel was found to contain malicious code. Source: ghsa-malware 013990a2334d492668cc0d60833e3b2a30e9578b49ca1d8a75f904b5c82e1932 Any...

MAL-2025-191106 Malicious code in ids-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050d0a8d9340c416d7410787a1a7b2c5e6cec36eb17bacecca14a2cfbcbf76c5 The package ids-css was found to contain malicious code. Source: ghsa-malware 03812dbf5f0120164f355aae423e3fad2e899eb9164b4468f7fd91844d33b35e Any...

MAL-2025-191026 Malicious code in @lessondesk/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c812dd964064f404443160aac0a9fddb5dccef95ecfb131a074fcf7176bd49f The package @lessondesk/api-client was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191070 Malicious code in barebones-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6b6723c24807a6fb2e90c2f5e0f7238e1a2c25e2602ab7f4ba4bb3d0f13efe The package barebones-css was found to contain malicious code. Source: ghsa-malware 32d179a02b1e407d2a71cf2912a7c87d6419900b71e13260889103a40736d0f6...

MAL-2025-191063 Malicious code in ai-crowl-shield (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549c731c3344684a7d963ff1c6a038b7eff1d29bfe6e235c520bc4be03fb905b The package ai-crowl-shield was found to contain malicious code. Source: ghsa-malware b7b9897c30c2e8638c5e762b4e62bca4a8bb7c3afd0e2e6bece241bb534dd7c...

MAL-2025-191149 Malicious code in victoria-wallet-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305ff7c4db9d9046f3637aeb746d2f95c58e1083e6fd8cfecf220f9a20911162 The package victoria-wallet-validator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191122 Malicious code in lang-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7644eb22af82aaf1aeebcd8954139ce3dc9b43a0db43be02605ee10037e3f75 The package lang-codes was found to contain malicious code. Source: ghsa-malware 80738e6b29d50856453735fa6d92a27222eb3def027ae81195eb7555e076f7df Any...

MAL-2025-191003 Malicious code in react-native-phone-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e134ec88971e1ecadce79d1699bde00b798633b1ef9a0f6ebb2dbf67a51cdf5 The package react-native-phone-call was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190969 Malicious code in invo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4a40c8b32a7c38f435045392647f8c5024b472cd396c5d370f6f90eb37848 The package invo was found to contain malicious code. Source: ghsa-malware 26188e61833b5e2bbf47803695cd609aa04a940cd68950202e5908815871f09f Any...