MAL-2025-192292 Malicious code in email-validated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af72446800f2251ecdda400ad30c23637f628d1487ae5c911bb4283e3fe10c The package email-validated was found to contain malicious code. Source: ghsa-malware 9f2a0d9794c8d949cc051fe3c306af63ddb55b6848d0607ef1f5d332585a2fc...

Malicious code in buffer-envjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328f0f326f30ba6e46eee18a532f81cdd6afdbd656e79c16ec2158af7f924c8f The package buffer-envjs was found to contain malicious code. Source: ghsa-malware 7dc4f4a51201db42dd81059708300e05eabba51b1ab48793c8f37d582fd24d93 A...

Malicious code in btc-transaction-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291d3fea363888c43824aaaa26f2eb389674822baacb18e5ff7498c9cfc74dee The package btc-transaction-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in codemirror-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788b98a42ba1658c92e6e86494ddd747ab154a01be456dfe9656760bd264fe46 The package codemirror-5 was found to contain malicious code. Source: ghsa-malware 0803dd9e41e867827659b46d2934d1a9700667e0f731dce60093ab5f9457c07f A...

MAL-2025-191548 Malicious code in internallib_v881 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a05ce6f3ec9a36ea97ed0f3c3b1ad47d759be64104c2b2520d695f5da2c8d8 The package internallibv881 was found to contain malicious code. Source: ghsa-malware bd5f984f8edb8d28061ac400a32ca61e7ce24ab864d705ed39b96e2d69b405b...

Malicious code in tailwind-scrollbar-variant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7a64f578e119daa50df50bd0cd9178bd4035b7ca595a72dc2b10da57b658d9 The package tailwind-scrollbar-variant was found to contain malicious code. Source: ghsa-malware...

Malicious code in cyber-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b577f3dcb8f7ebe36e69f65a8b605a23ff2dbdb7d896e78bc20f1880331a238c The package cyber-fca was found to contain malicious code. Source: ghsa-malware c7c387785610633bef06443bfd2ecd4a274d3d1265e22822b04579fae216ba2c Any...

MAL-2025-191537 Malicious code in cyber-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b577f3dcb8f7ebe36e69f65a8b605a23ff2dbdb7d896e78bc20f1880331a238c The package cyber-fca was found to contain malicious code. Source: ghsa-malware c7c387785610633bef06443bfd2ecd4a274d3d1265e22822b04579fae216ba2c Any...

Malicious code in mayhem-wma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d242ed0467287371909e2fef415c86d7688c77b9a33f6b43c52d37bfc2d7fa6e The package mayhem-wma was found to contain malicious code. Source: ghsa-malware 9f00d5cfad9006d0cb83e7249554304291a746a42a2191314e1b70990e854df5 Any...

MAL-2025-191465 Malicious code in mcp-polymarket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c93eadc60da9cb188762b7190a7c6b48a5eaa9766f23d7515b944c05eb3f005 The package mcp-polymarket was found to contain malicious code. Source: ghsa-malware 41eb8c2fd8bee675d7893ba16ddd2f6fd03730818520e928c0320ed2a0306602...

MAL-2025-191405 Malicious code in quickswap-default-staking-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e55808d092f76fd5927721525051ffdb180520c3f2b7ae26fb3d626931c9f9 The package quickswap-default-staking-list was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191416 Malicious code in rediff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86aaca91ce5f75365f233d2d0448fcfe25ce792ebc203487993fdbed70e5c68 The package rediff was found to contain malicious code. Source: ghsa-malware 6f58213ac5761ffaaca614a73e2f1b9927e9f4b25f9dc8b3f64258411281ce41 Any...

Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in insomnia-plugin-random-pick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717488a1afc3be853313a0f8f243fa748188c0b321d8c9096182cf59bfbb1ed The package insomnia-plugin-random-pick was found to contain malicious code. Source: ghsa-malware...

Malicious code in @osmanekrem/bmad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b38bf9ed936861ce98cafc711d3d8a8b9cacdc551e5ea1142ea4143cb60aa The package @osmanekrem/bmad was found to contain malicious code. Source: ghsa-malware 4ec958dd0f9ea68f75efc0bfd5d3c3af3b068c9bd15c3a1806453debabae0a...

Malicious code in @ntnx/t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865f9cc29095e84318d97631a2242512c5361ad8d820cd6212a8cb06417c92a The package @ntnx/t was found to contain malicious code. Source: ghsa-malware a56d53a5cf562204b62c1283f7cc997da367c0eb1cd09c913dcedbe5469bff6e Any...

Malicious code in bun-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0f656e3adcef8f66c427a2cc68a9a0e99581c1a429ab204f9451c59dab21a1 The package bun-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/schoolbus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c14a4cce7a095ba23b1ec9898ad654afc8e736c94cf26a1b8c15aa123973fe9 The package @lessondesk/schoolbus was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191067 Malicious code in avvvatars-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0177ed2908c06ff8f5fa7cf686ba026f4f225b8c4abe0678cbd28c4962b8fc The package avvvatars-vue was found to contain malicious code. Source: ghsa-malware e5704fc14aead5570b7b1abc795002ea942c9f791057989143dbe27384b20259...

Malicious code in @varsityvibe/api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2a44aba3b7acd04a01442d5b341474ac6638d772aaac1716a726e819d48611 The package @varsityvibe/api-client was found to contain malicious code. Source: ghsa-malware...