MAL-2026-178 Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dabf38b16acea59219df3a3f57a396f3ebe958985096579cd43c419609b764 The package n8n-nodes-hfgjf-irtuinvcm-lasdqewriit was found to contain malicious code. Source: ghsa-malware...

Malicious code in mixpanel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11bdefc18a5b590716cefe2036f1f759ccb42fd3c22c420ac524a479ff9f01 The package mixpanel-lib was found to contain malicious code. Source: ghsa-malware 03fe07795e21df3debb6abf06b5b47f19ddd7996e5be6b06d8dd07fa37e7cd2f A...

MAL-2026-181 Malicious code in smintio-portals-component-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ac8dad03743200fb36bb249f7d2292a267daaffb767a56e0c0e6634dc71afe The package smintio-portals-component-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2026-160 Malicious code in json-mappings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e1cd8f06a356d4ca69b87f0f2e2dbd6245d42c08c515189c1681251d0cf3aa3 The package json-mappings was found to contain malicious code. Source: ghsa-malware f708e7c962688a26f87824a7ae962f667dc7238ba5b55aeb27c26e18c5f4b13f...

Malicious code in sparkling-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e0e650696ea120abbbc0a198865731fbeea781cc9ee947bd39c8f7d76c4eab The package sparkling-cli was found to contain malicious code. Source: ghsa-malware 6185870baa4e15b65e8df51e713dcb6e3e54d79fd00389cfa0f86421cef94f6e...

Malicious code in week-4-node-modularization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0183bf3fb4823612b5a0668f2fc3e58fe3de5ee161fa9acd80244e0400dc40b9 The package week-4-node-modularization was found to contain malicious code. Source: ghsa-malware...

MAL-2026-135 Malicious code in npe-toolkit-faves (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d361a1a46446a6e7317c9f4c3db039746ceea8e599e55c309a86dba366e8ecc6 The package npe-toolkit-faves was found to contain malicious code. Source: ghsa-malware...

Malicious code in npe-toolkit-faves (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d361a1a46446a6e7317c9f4c3db039746ceea8e599e55c309a86dba366e8ecc6 The package npe-toolkit-faves was found to contain malicious code. Source: ghsa-malware...

Malicious code in aws-target-mediator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebc5003f75ac973cedd53d212f4d9b3dc016b36e43b24ca0a10e77e485b9141 The package aws-target-mediator was found to contain malicious code. Source: ghsa-malware...

MAL-2026-137 Malicious code in rt-da-classic-card-collection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40df14bf87fe4eb4e065fda942f953028db00c5e8148c1c1ccc2f6cf623d3611 The package rt-da-classic-card-collection was found to contain malicious code. Source: ghsa-malware...

Malicious code in rt-live-hero (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b963cc4f9c61717fb440dbd17f3897337fd7aa94a3d077bcd8307c2faf109c57 The package rt-live-hero was found to contain malicious code. Source: ghsa-malware f56b0f0c83fe7af0849099067abaa56333d2eadffeb3f8152244c74b40a706d6 A...

MAL-2026-133 Malicious code in language-capirca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd955d0634b6bcda38eae58473a0e1bf135cde9c2036c680ee490ef1c4ba698 The package language-capirca was found to contain malicious code. Source: ghsa-malware 2a357e83ec0c25df41c3b48d19bcd056e7faf888bfc0a5d148ab30ac7f8884...

Malicious code in wwwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00200d502997800295ce4f4ca7fe74962921193042bdddb47c91ef1bc817f61f The package wwwt was found to contain malicious code. Source: ghsa-malware 7076a3b538d3f3d8e1ae114139247fbcd223995fa82f1e63da64c9dc56dc8eb8 Any...

MAL-2026-119 Malicious code in klywarns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b7d6c7fb14a0375e83aafab601053676b49f24851d2c8d2ca0b42f4ccd517 The package klywarns was found to contain malicious code. Source: ghsa-malware 0fd557abca883cf56c7a2f4c1b67ff5b64577d170103a99df6a39a991bcd34c1 Any...

MAL-2026-115 Malicious code in hiqomu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1b14ad8ceaca23c5a536740bb79e0425805fb3df3bd23448dd6cee7af377ad The package hiqomu was found to contain malicious code. Source: ghsa-malware 0bd082bac5a58a31b60a13d745e6ec55d8e49b1e4d5d17c9f3711f28e611f0de Any...

Malicious code in syqara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62fd7bca2ef5e78bc040138dfaac5d1c63a4efb820747b58406db43b6965a681 The package syqara was found to contain malicious code. Source: ghsa-malware 247c2c1d35e2e74ea2a025de37858894366c24053f4ff7517f2204ded2b20344 Any...

MAL-2026-112 Malicious code in fbfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd19f863aafa8b0d6a355e500577066f9ec36e1cc34262820c743be8ca289b4f The package fbfu was found to contain malicious code. Source: ghsa-malware 98bf9b443e26a63838946f3f4d3e5eafbd1da50efbb104378cea19e41ca78a7b Any...

MAL-2026-117 Malicious code in kdb1-demo-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a67f080ec14c4f32313e33736b6b67e59accae55e5e2c388613df54d5b5c85d The package kdb1-demo-v2 was found to contain malicious code. Source: ghsa-malware c1a20b2217012bae0720ec06b437e454ea9f37100cf6bbec5477a5460ff53424 A...

MAL-2026-105 Malicious code in syntax-class-properties (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf72c51c69dcb71762b580a0299d8e6c413cc2f20b0f9133034a98d43ce4151a The package syntax-class-properties was found to contain malicious code. Source: ghsa-malware...

Malicious code in shopify-perf-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8ab5bcfbfadc319f33cd1364bdbef1f7517fe3c502f9617bc77391014296a2 The package shopify-perf-kit was found to contain malicious code. Source: ghsa-malware b815f7df6ccc90c9082b80e772505706c55a58e7e187d18b01ff56e6524e57...