Malicious code in awsm-acslibs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75908418c77ed1eed9d51f2880e20a9608a49fe6e21582715517f0fa4044d349 The package awsm-acslibs was found to contain malicious code. Source: ghsa-malware 566e39645aaa10c8e2d212725d48fa1023624b811c5d98b6c4cf6354d1beba95 A...

Malicious code in spark-ar-jest-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67c582fb00bd7fd05adc5f9680fed203dd43086ab6efbcbec369bb386eaeb6f The package spark-ar-jest-mocks was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-react-app-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dce198bea6270ee06edafb853bcde3e517778beca89073512ee6d6cf1da2304 The package create-react-app-lambda was found to contain malicious code. Source: ghsa-malware...

Malicious code in rt-da-classic-card-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40df14bf87fe4eb4e065fda942f953028db00c5e8148c1c1ccc2f6cf623d3611 The package rt-da-classic-card-collection was found to contain malicious code. Source: ghsa-malware...

MAL-2026-136 Malicious code in npe-toolkit-server-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3eb14324fd68e20b30e8d4ebaa6af41f05a0596dd3e274650d3d75503199426 The package npe-toolkit-server-deps was found to contain malicious code. Source: ghsa-malware...

MAL-2026-129 Malicious code in aws-target-mediator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebc5003f75ac973cedd53d212f4d9b3dc016b36e43b24ca0a10e77e485b9141 The package aws-target-mediator was found to contain malicious code. Source: ghsa-malware...

Malicious code in hiqomu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1b14ad8ceaca23c5a536740bb79e0425805fb3df3bd23448dd6cee7af377ad The package hiqomu was found to contain malicious code. Source: ghsa-malware 0bd082bac5a58a31b60a13d745e6ec55d8e49b1e4d5d17c9f3711f28e611f0de Any...

MAL-2026-110 Malicious code in @nestor_hexom/qyxb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0998609712e2df6e736e3da823279634b2cb874f692bba6f3ca65e452a4eb2a The package @nestorhexom/qyxb was found to contain malicious code. Source: ghsa-malware...

MAL-2026-121 Malicious code in syqara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fd7bca2ef5e78bc040138dfaac5d1c63a4efb820747b58406db43b6965a681 The package syqara was found to contain malicious code. Source: ghsa-malware 247c2c1d35e2e74ea2a025de37858894366c24053f4ff7517f2204ded2b20344 Any...

MAL-2026-122 Malicious code in vjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e8acf8864bcd740ddcecbf3609839a194b93169c280c96953faf259ab2f715 The package vjri was found to contain malicious code. Source: ghsa-malware 6ea2ec85dcac95d0edd1d8fbc801b94b93cadbdee6568b330b565b545f85fea1 Any...

MAL-2026-107 Malicious code in 1kzr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1191bf170b21e0c9c0b1904f808522aa27e23736bb05c9c16332fd1a97e52332 The package 1kzr was found to contain malicious code. Source: ghsa-malware 715d44ba7af24784970425367d9e909f00a7b64031c3004b2fe93628232ab95c Any...

Malicious code in syntax-class-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf72c51c69dcb71762b580a0299d8e6c413cc2f20b0f9133034a98d43ce4151a The package syntax-class-properties was found to contain malicious code. Source: ghsa-malware...

MAL-2026-104 Malicious code in sort-imports-es6-autofix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20061f2672fcbe82b13ab8e09c629d93991ef45200bb30c7bf9a1dc78cbb4230 The package sort-imports-es6-autofix was found to contain malicious code. Source: ghsa-malware...

Arbitrary File Upload

Overview n8n-core is a Core functionality of n8n Affected versions of this package are vulnerable to Arbitrary File Upload via the Git Node. An authenticated user can achieve execution of untrusted code by uploading malicious files that are subsequently executed by the service. This can lead to...

Malicious code in elastic-docs-v3-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc3812db2733b6d6bfaba2e5b7b08065e1b07291a2a58a6dfa589b31added3e6 The package elastic-docs-v3-utilities was found to contain malicious code. Source: ghsa-malware...

Malicious code in matic-transfer-consumer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bf4eeb30140d673f8136ab4039e9f3bcc3f3b7d7482e96260a2806bf890eef The package matic-transfer-consumer was found to contain malicious code. Source: ghsa-malware...

Malicious code in polymarket-clob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e650fcd9e5cec151122c4e59ee9f829a9f8f3afbc998be35354879cd24f5d8bf The package polymarket-clob was found to contain malicious code. Source: ghsa-malware c6f2692198b832546ebc0a47e287ea8e976cbbacae0f1963545cb4610ddd08b...

Malicious code in ethos2.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a012a962472733bf307c16dd1dfe1806727190273d53ac57bf4b524a26d34c96 The package ethos2.0 was found to contain malicious code. Source: ghsa-malware b646ddc4b3047452eaaf5304b21effbc2f0dd9800fd136ebfb4d33936f3bd8e6 Any...

MAL-2026-76 Malicious code in open-telemetry-mini-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ad802a8e687f98fad0939faad9c0b5d2031689d0326e21e70785eade52bf15 The package open-telemetry-mini-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in upgrade-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fddf8ed26118557ffdca771219746de0194477c83724370ef30b18d858b1d0 The package upgrade-mobile was found to contain malicious code. Source: ghsa-malware a26e290558ffe604a105aa63eb83a2f6aae1e8656e947908c9d29c3c3b7632db...