MAL-2025-191104 Malicious code in gitsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35755a0fed2224e2746cd32f8d78ac75980b4669f74e99603a5420f45712cfb9 The package gitsafe was found to contain malicious code. Source: ghsa-malware 9452f81203482947db7c464bd8a2250d768724dc16837b1e6d56b5c561b343ed Any...

MAL-2025-191095 Malicious code in flatten-unflatten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96678bbed20be5d500dc65bda769b41f7d3666a18c8a76262aca5ed79ef584fd The package flatten-unflatten was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191105 Malicious code in gulp-inject-envs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d230a528331dc71aa1fa5cb1d9fd8146d79d7e92f3aae2efd2ce7c177640b337 The package gulp-inject-envs was found to contain malicious code. Source: ghsa-malware 5dafa09839ea07c586670ac1a302805fb65ffaf32d1641dcab2be569a68231...

MAL-2025-191094 Malicious code in flapstacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3e9f1a599a57853dfcaac8296e337783da36d9fbdf2545320a59a3ac12114e The package flapstacks was found to contain malicious code. Source: ghsa-malware 26f6aaeff17a92e5a6df4148bfbcbaf24b10d838e3623a219ea63a5e5440d7fe Any...

MAL-2025-191128 Malicious code in medusa-plugin-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11d8b0e347690c78b45c790ef5d54f7cadf6d5d2fa89a86ef6c1765ab136f The package medusa-plugin-logs was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191093 Malicious code in fittxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57d0df6ffd72d43e267f4cb6f900055e9c3497d3b812a200bcaccf0356d762b The package fittxt was found to contain malicious code. Source: ghsa-malware 1dadb9e87da9f569b318ce6dd9a3a17eba4970fc2ac296d5ddd6f8515a5b3609 Any...

MAL-2025-191113 Malicious code in jquery-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31127dd6191c9d3e68e94d705b43d24066f06f37b41f659a5a6831a8a811fc11 The package jquery-bindings was found to contain malicious code. Source: ghsa-malware eb6c4671167bd91b31b632f661a4bc8a3d627412796b9899fae3d0797eb51e3...

MAL-2025-191092 Malicious code in firestore-search-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13c5bf9a90c4b5043c0ac86fea67792a3688c2d84fb39eb0f2cf28902fe2e78 The package firestore-search-engine was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191116 Malicious code in kill-port (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8762d3a240cbf5a33e4b613b2ea601d5515824da362b82eed4b5095baa7b8c The package kill-port was found to contain malicious code. Source: ghsa-malware 12e6ea3a28f8e792e2cac11bd7aa1651eed2f77b6468a8d9aa43567dc9e95bbd Any...

MAL-2025-191091 Malicious code in feature-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f38090f7d06e2ca6dedee4db704eb48de8c582ee65be6a5142487fba31d1e1 The package feature-flip was found to contain malicious code. Source: ghsa-malware 1d3a90cfc6cc14cf62f81b6f2ca995f00fbff67b1b819ba339516765de278bd2 A...

MAL-2025-191121 Malicious code in kwami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962220b95b8768ca9d0f5211baf9f5169003e56d4e99013aee0fc583b97dd51b The package kwami was found to contain malicious code. Source: ghsa-malware 4bb8cadf47cecbcb6cc8b75632c3af5f67d8d202bc8a30ac4dad5521edcadfd2 Any...

MAL-2025-191090 Malicious code in fat-fingered (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5e127ac8099a8bee6fc42a5c3911a275384f00af4cd97082dde08a2bf2704f The package fat-fingered was found to contain malicious code. Source: ghsa-malware 77d5770972318f63a00eb2722c056f2e554e8970abd97f94cba9a3dde292a8d8 A...

MAL-2025-191137 Malicious code in okta-react-router-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3641ce0ba5810e0edb58d9251065f65ddf54d4a3fca6ef20f36fa46723b741 The package okta-react-router-6 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191122 Malicious code in lang-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7644eb22af82aaf1aeebcd8954139ce3dc9b43a0db43be02605ee10037e3f75 The package lang-codes was found to contain malicious code. Source: ghsa-malware 80738e6b29d50856453735fa6d92a27222eb3def027ae81195eb7555e076f7df Any...

MAL-2025-191136 Malicious code in obj-to-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c28013383e05a71d5da9d3d7c0d685a6355e42251a9527e769061e13ce54bb The package obj-to-css was found to contain malicious code. Source: ghsa-malware ada9fa1c509e4ac91c240ba95d3953b53291943071c42aa967d243bd17682078 Any...

MAL-2025-191155 Malicious code in wenk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209b9df1ab21f1d5e193a2a9e68ece62122dc7979592c1f21599dd018aebfff7 The package wenk was found to contain malicious code. Source: ghsa-malware 440c248dbbb7a7c4fb5db4f70f71b5dd51ca4287f3d4e83c7caceeab7aee2dd8 Any...

MAL-2025-191135 Malicious code in normal-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3cc821206cbfa969e8f4e3472a09caf43736b8e70d4ec80ed20931b64406b8 The package normal-store was found to contain malicious code. Source: ghsa-malware 1e1d6a2537e74912ec3831bf85e49e8ba908fc28838ec60c07f7218717ba36ae A...

MAL-2025-191130 Malicious code in ngx-wooapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a7e8ff946dd01747d5da4806be36032cebaf9ed78da76e88680ece90c066be The package ngx-wooapi was found to contain malicious code. Source: ghsa-malware 6bafe828b44a7293999ec4bd01079f40fff2fe77bb43d6990dc20bcbc6b83162 Any...

MAL-2025-191124 Malicious code in lint-staged-imagemin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cfbe33b97d4e3997d348c9532c834715e755ea1d28a6b30f2276209d4f45db The package lint-staged-imagemin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191156 Malicious code in zuper-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc2065f0dd8abd271cf1dd9577497f7fb19724820c50925509236093e73567 The package zuper-sdk was found to contain malicious code. Source: ghsa-malware c84dbb98c137f6b50ce20f0cae6113a3d32f5cd6910583273c4d11d4966d105c Any...