MAL-2026-67 Malicious code in redis-cookie-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91375f4f82c5d4299e69cf91489e82b06358bccaa40ec51ab1c19c3e03e3e99a The package redis-cookie-parser was found to contain malicious code. Source: ghsa-malware...

MAL-2026-64 Malicious code in oj-sp-css-additions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f44dd1651a643e28e082a676732a19e8a8a8fcf5b2f88264aa47c7f5e31dce The package oj-sp-css-additions was found to contain malicious code. Source: ghsa-malware...

MAL-2026-44 Malicious code in @airtel-web/legos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dc2961b8c79c5958e1d5ebe27ec58d5bf181c3027555890b39d1c06a37df27 The package @airtel-web/legos was found to contain malicious code. Source: ghsa-malware...

MAL-2025-193005 Malicious code in landingpage-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d33042e8f056ce06ca8931599f3a0d11547dd6a7d11d2f74ecc0140bd247533 The package landingpage-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-smart-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdecb4163903c7cab6a325ea865641719253be69a34f76a172a717792a8b53bb The package @vietmoney/react-native-smart-gallery was found to contain malicious code. Source: ghsa-malware...

Malicious code in nbugs-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b87ac16f6f77129a82c79e3e8e1e7a2befb3846cb6824c045fe5203c3f63a3 The package nbugs-video was found to contain malicious code. Source: ghsa-malware 25902a3f4bd357713019e6b42a7e4630aafad4a9a428c91dd406d7dfa883a477 An...

MAL-2025-192981 Malicious code in @ptest2535/test_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b13d530a9ae65d0d85399d64cd8b0842f91f121a59d8e6386d63a730746d23d The package @ptest2535/testpackage was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ptest2535/l_woker_mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4196b81679a34023da03dc65cd5831c81e6c9d66d1a3617113d28a85b23c83c The package @ptest2535/lwokermal was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192988 Malicious code in yellowdiscordlookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a458f47de1b6a86fa1139c7fa7def7c0035d181b6db01d635374e0e6058893a9 The package yellowdiscordlookup was found to contain malicious code. Source: ghsa-malware...

Malicious code in portal-lise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0c023f6f7e2ba4df069103ad42d8cb03575410033a50f5887ec1d0fbe94205 The package portal-lise was found to contain malicious code. Source: ghsa-malware 6d0ea4511808b283817242b827687f9a2fb37a0a7f17db46db1f4acbd6ba0de8 An...

Malicious code in rt-text-media-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761afaf4df6aa1b7badedc5757ada134cb041af11dad1257171abae2be3a4589 The package rt-text-media-collection was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192977 Malicious code in shopify-app-react-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58b68abe183faeee5b24e4b524d982d1c78881c8d0c48dd847411bf8fc087e6 The package shopify-app-react-router was found to contain malicious code. Source: ghsa-malware...

Malicious code in eb-csr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde17b1e5e6a9e071d031714e31335d93e040635afe32c1cb655b8892e8e2d3b The package eb-csr was found to contain malicious code. Source: ghsa-malware 633a3693267851fd0c8eeee4cfc971fd7009c5c128d6a9ac0392d6ded3a8614f Any...

MAL-2026-170 Malicious code in secguest-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76ab99d9a667e9700bb0176dde546ff3748b742775ea322766035a730391891 The package secguest-react-lib was found to contain malicious code. Source: ghsa-malware...

📄 MagnusBilling 6 Server-Side Request Forgery / Path Traversal

Proof of concept exploit for MagnusBilling 6 vulnerabilities including server-side request forgery, path traversal, and cryptographic weaknesses. ============================================================================================================================================= | Title :...

MAL-2025-192760 Malicious code in supply_chain_dummy_test_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427c02751dbaf2ec96a9818919ef225ce09a1017b33a494163746cce09acbad2 The package supplychaindummytest1 was found to contain malicious code. Source: ghsa-malware...

Malicious code in start-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5bc70fc220a38dd997887f438e9a6d5afb70cf1d30dd8b95a664e013a7309e The package start-log-plugin was found to contain malicious code. Source: ghsa-malware 3ef7e02e352e8d339add82817454f490a0e4588fffb1dcafa53cc0136f4e9d...

Malicious code in excluder-mcp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e8a4074afa107f60ef1b93a1b5ad90b034338e5d94eed6d5b1e27fa583b96e The package excluder-mcp-package was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192748 Malicious code in lotusbail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f2dbbd6b5a88d7702bb519fe20f7f45ab5c4cf430900ca16912d055a6e2f3b The package lotusbail was found to contain malicious code. Source: ghsa-malware 9a89a3feaf56d39c9a953fb5de2e0f4ae6176dce75ee9d95baddc8ef83e59b91 Any...

Malicious code in @aa-techops-ui/ping-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d523ddbefc7a817d1b6a431d5f9d0aca24fecc12ef57ce37915df0a88af3f132 The package @aa-techops-ui/ping-authentication was found to contain malicious code. Source: ghsa-malware...