MAL-2025-190983 Malicious code in package-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1888e34e329bc0ea8f84900de1b8ac52cf5271deb84547900790be3335b0d3e4 The package package-tester was found to contain malicious code. Source: ghsa-malware 1cd7a624ca6e7cb7928904d72a30bb889766f3c6009a09fb20758a0a29b56255...

MAL-2025-190960 Malicious code in eslint-config-nitpicky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574a6235abe523aed3a5411fc8472635c6c8d455b973bcb79f3424effe0fd99b The package eslint-config-nitpicky was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190959 Malicious code in enforce-branch-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b39bd3b9b616432b7d29c60d2da9d425b52f8823742287d8f6c4203319383a The package enforce-branch-name was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190953 Malicious code in css-dedoupe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7708f95527bfb987e5bf71ee911acffc550f40aff1b046d3249c9504c14fd52f The package css-dedoupe was found to contain malicious code. Source: ghsa-malware 9bad835f3386b87b3ce781849db6a96394982d6a092ee635c731d854493dd197 An...

MAL-2025-190951 Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191008 Malicious code in sa-company-registration-number-regex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15485422c9807206afeb3c43ed1e03d2f2499b0c689d8bf253e663cf72d7fa7 The package sa-company-registration-number-regex was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191024 Malicious code in tiaan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eec9aed3f08840a4f5787d8e5edb18c097459657ba29ca488daae2047709701 The package tiaan was found to contain malicious code. Source: ghsa-malware 0135c9cc2fe2d3112342fbb4e91dee9f30647a8d8bc93c0453991d8c51f4710e Any...

MAL-2025-190936 Malicious code in typefence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9ac344bf18963e146d64aec1de72c3db819eb2c4356be7257ef1980555a17f The package typefence was found to contain malicious code. Source: ghsa-malware 28d8025e6d485b7679079ba265b2ed9a28c10029903c94441308121d974cbf18 Any...

MAL-2025-190940 Malicious code in url-encode-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ce07aaa237eff3cc95c7bb560f4096191d2d5328de45f176f3f8662ca7cd34 The package url-encode-decode was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190895 Malicious code in @posthog/twilio-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e9678d9d7f6fcdae98731e5fc3883af7f4150e22850c7eab87f992d00a4082 The package @posthog/twilio-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190903 Malicious code in @postman/pm-bin-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94045a09bfa0905195be4f028d9e42bcf608154a645b14b2028754dc6e787b80 The package @postman/pm-bin-linux-x64 was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190894 Malicious code in @posthog/taxonomy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6160bb29593f706f1623c9cc373f06290747d183e2d495f4d0afc169252d3046 The package @posthog/taxonomy-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190915 Malicious code in @seung-ju/react-native-action-sheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a093775c06aa43c37f1449879903040ac8d4670967b0fc9931be9fc842d3c72 The package @seung-ju/react-native-action-sheet was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190889 Malicious code in @posthog/plugin-unduplicates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c908d2f59bb746353f63ff6561e3e99d8055d86ee72332228bfd40f24b8dad0 The package @posthog/plugin-unduplicates was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190869 Malicious code in @mcp-use/mcp-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0023b5bffd20d429759e1ae5215a619566250b2e0d2ebe4acd2e27e484d493 The package @mcp-use/mcp-use was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190881 Malicious code in @posthog/gitub-star-sync-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be422ec924addbeb23c34a8b3305835feb3d665ab57afdc1450734d0b10f5a4 The package @posthog/gitub-star-sync-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190892 Malicious code in @posthog/sendgrid-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538f52ec82c02a69031b8b84a1e12b2d22ee68462c722f9dd4a8ea07d4e81d44 The package @posthog/sendgrid-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190868 Malicious code in @mcp-use/inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062fd62b0f62dafc3c8ee95640853f3b8b82191ac8ed44df47b0f944e514ebc5 The package @mcp-use/inspector was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190918 Malicious code in @zapier/mcp-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b2f7745be8592869c863671add1d5a04c1d33f7a2c23a54fde611a5e021226 The package @zapier/mcp-integration was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190880 Malicious code in @posthog/github-release-tracking-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87af9bbf0349dfcf64e3a477f69780fd16d5d4d8e0269f263dc25214fd2f00 The package @posthog/github-release-tracking-plugin was found to contain malicious code. Source: ghsa-malware...