Malicious code in token.js-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ea628a23a78a7ef88dc4301ffbaf6515d00c92b331d0dfe518b6156d6cf01 The package token.js-fork was found to contain malicious code. Source: ghsa-malware c175fb9f3c6376f85f6e9b597aeaa381892983e4348984c54354174cca12f8a2...

MAL-2025-190708 Malicious code in @actbase/react-daum-postcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6730961ddc6bcfd14bc8564e2a8ef3d34d757e1ffae65ed7ff88232e115104 The package @actbase/react-daum-postcode was found to contain malicious code. Source: ghsa-malware...

Malicious code in test-hardhat-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c58c4506524c992c75582a4ebe5865965b7bf58281bd247ee81b3b08731515 The package test-hardhat-app was found to contain malicious code. Source: ghsa-malware 03564b5c607dce5fdce1c0f5802eb5816a37d6f74acf0e5ae3624f6e9b2224...

Malicious code in @posthog/piscina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd3d94d864b267499cd7c7897fa7fc4af2c420f3aa6bd152a0b22feae86418b The package @posthog/piscina was found to contain malicious code. Source: ghsa-malware 731794a5898b7ca6049626b91dad59ed65293d59335397c1989a1b45a498cb...

MAL-2025-190777 Malicious code in orbit-nebula-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...

Malicious code in create-glee-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c0932871cd18a6f6a6b4dc800d53bb26dee4aa4d1ca50380eb529d8de49e31 The package create-glee-app was found to contain malicious code. Source: ghsa-malware e24413ea376e0b85679ffebea5b81417a76a0134b6cde174e7a183437326193...

Malicious code in @zapier/browserslist-config-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5146756159d44339572781661307fc36bb08adb636158ee54628f774506ae47 The package @zapier/browserslist-config-zapier was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/web-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dff5164da9cab0fa9cbd6684d231b19caa4cc57fe660f4d0ad2cd8573dc1a The package @asyncapi/web-component was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190787 Malicious code in vite-plugin-httpfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d63741ea6b6aadbc224aabf56e98c5eb7b664d7554dbb502869a97ffffb2f46 The package vite-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...

Malicious code in @postman/node-keytar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4c8023740ffdaef4872c662f4f7be6f3258a479dfb93494adda9c170fa4818 The package @postman/node-keytar was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190667 Malicious code in @ensdomains/eth-ens-namehash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0009bf3870d33e9e174ce53fe0a281b43402e1f8b78f62e6cd296ad8f082588 The package @ensdomains/eth-ens-namehash was found to contain malicious code. Source: ghsa-malware...

Malicious code in orbit-nebula-draw-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d521db6f84340dc75631ec8c317db0054fa0b23e218d304ea901c1f239909 The package orbit-nebula-draw-tools was found to contain malicious code. Source: ghsa-malware...

Malicious code in trigo-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b342d6dbb3287df2002c455ce23553f3aa118b46e447741fa840397425741076 The package trigo-react-app was found to contain malicious code. Source: ghsa-malware 11f63c9b322a04a69d7c2c875302dfe971081157a6ea2c3360e65c5e4f9f5a9...

Malicious code in @trigo/bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6798c49edd52f5db8414de6ec11538d35d915051f5d69bb07863965971915e57 The package @trigo/bool-expressions was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/rrweb-snapshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09f740a4b99a55a685452aa412d77942e67c0de95136282343012196ed7bf41 The package @posthog/rrweb-snapshot was found to contain malicious code. Source: ghsa-malware...

Malicious code in redux-forge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab662afde2ebe0d7c2a8537b2bdab8226b61daf75ff4e54ad51bf5bb7eee8eb The package redux-forge was found to contain malicious code. Source: ghsa-malware f80cb61ec8f9b4f1ee385b40c40e1816cb61a012074ddc792d16f433c6a32294 An...

Malicious code in @asyncapi/bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4772ec7022abe0375835d594a76a518350868bfe4630f4cf472962d4e6bdf2a9 The package @asyncapi/bundler was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/address-encoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec8264ecb2af0b5028f08af1a108f7fe73cd1cbe55ea2cb7102a3e28b2e1052e The package @ensdomains/address-encoder was found to contain malicious code. Source: ghsa-malware...

Malicious code in zapier-platform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feaebf66449e3086f74f77ceae356f74e4eefe23a3624f5fe1d4c7c1838ea25e The package zapier-platform-core was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60490138601b88d5bc5b3f5cfb5d6bf7f1c04848429e5aa48c1812ff4c8208e5 The package @asyncapi/parser was found to contain malicious code. Source: ghsa-malware 58daec6c982800e33901b1072260f4b144aa0b64db38ee45dd9219fe13a654...